Insufficient Capability Checks in Moodle Leading to Unauthorized Badge Deletion

CVE-2024-43431

What is CVE-2024-43431?

A vulnerability has been identified in Moodle due to insufficient capability checks, which allows users to delete badges they do not have legitimate access to. This issue poses a risk of unauthorized modifications within user accounts, potentially leading to data corruption or loss of integrity in the administrative settings. Promptly addressing this vulnerability is essential for maintaining the security and reliability of the Moodle platform.

References