PT-2024-8805 · Moodle+2 · Moodle+2

Published 2024-09-04 · Updated 2025-06-03 · CVE-2024-45689

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Moodle (affected versions not specified)

Description: A flaw was found in the dynamic tables of Moodle, where capability checks were not enforced, allowing users to retrieve information they did not have permission to access. This issue is related to insufficient access control in the core table/dynamic module of the virtual learning environment. The exploitation of this flaw can enable a remote attacker to gain unauthorized access to protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Information Disclosure

Improper Privilege Management

Missing Authorization

Weakness Enumeration

CWE-285

CWE-200

CWE-269

CWE-264

CWE-862

Related Identifiers

ALT-PU-2024-16385

ALT-PU-2024-16417

BDU:2024-10437

BIT-MOODLE-2024-45689

CVE-2024-45689

GHSA-J822-X5GG-5R56

Affected Products

Alt Linux

Moodle

Red Os

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2024-45689 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45689 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-45689 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2024-45689 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45689 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j822-x5gg-5r56 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-45689 · Security Note
• https://bdu.fstec.ru/vul/2024-10437 · Security Note
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c · Note
• https://jsdoc.moodledev.io/main/module-core_table_dynamic.html · Note
• https://vuldb.com/?id.277162 · Note
• https://moodle.org/mod/forum/discuss.php?d=461894#p1854491 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-moodle-cve-2024-45689/?sphrase_id=592548 · Note
• https://moodle.org/security/index.php?lang=ru · Note