Search for vulnerabilities
Vulnerability details: VCID-dv9g-2war-wybv
Vulnerability ID VCID-dv9g-2war-wybv
Aliases CVE-2024-45689
GHSA-j822-x5gg-5r56
Summary Moodle allows users to retrieve information they did not have permission to access A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-285 Improper Authorization
CWE-862 Missing Authorization
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00067 https://api.first.org/data/v1/epss?cve=CVE-2024-45689
epss 0.00067 https://api.first.org/data/v1/epss?cve=CVE-2024-45689
cvssv3.1 6.5 https://bugzilla.redhat.com/show_bug.cgi?id=2309941
generic_textual MODERATE https://bugzilla.redhat.com/show_bug.cgi?id=2309941
ssvc Track https://bugzilla.redhat.com/show_bug.cgi?id=2309941
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-j822-x5gg-5r56
cvssv3.1 6.5 https://github.com/moodle/moodle
generic_textual MODERATE https://github.com/moodle/moodle
cvssv3.1 6.5 https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
generic_textual MODERATE https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
cvssv3.1 6.5 https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
generic_textual MODERATE https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
cvssv3.1 6.5 https://nvd.nist.gov/vuln/detail/CVE-2024-45689
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2024-45689
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-45689
https://bugzilla.redhat.com/show_bug.cgi?id=2309941
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
https://nvd.nist.gov/vuln/detail/CVE-2024-45689
GHSA-j822-x5gg-5r56 https://github.com/advisories/GHSA-j822-x5gg-5r56
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://bugzilla.redhat.com/show_bug.cgi?id=2309941
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:47Z/ Found at https://bugzilla.redhat.com/show_bug.cgi?id=2309941
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/moodle/moodle
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-45689
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.21209
EPSS Score 0.00067
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:10:43.110735+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-j822-x5gg-5r56/GHSA-j822-x5gg-5r56.json 36.1.3