diff --git a/advisories/github-reviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json b/advisories/github-reviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json new file mode 100644 index 00000000000..2d3f03c0336 --- /dev/null +++ b/advisories/github-reviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json @@ -0,0 +1,69 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g8r3-2v89-j6r5", + "modified": "2024-11-13T18:38:36Z", + "published": "2024-11-13T15:31:37Z", + "aliases": [ + "CVE-2024-48900" + ], + "summary": "Moodle IDOR when accessing list of badge recipients", + "details": "A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "moodle/moodle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.4.0" + }, + { + "fixed": "4.4.4" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48900" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318818" + }, + { + "type": "PACKAGE", + "url": "https://github.com/moodle/moodle" + }, + { + "type": "WEB", + "url": "https://moodle.org/mod/forum/discuss.php?d=462879" + }, + { + "type": "WEB", + "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83178" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-11-13T18:38:36Z", + "nvd_published_at": "2024-11-13T15:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json b/advisories/unreviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json deleted file mode 100644 index 45707189bdf..00000000000 --- a/advisories/unreviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-g8r3-2v89-j6r5", - "modified": "2024-11-13T15:31:37Z", - "published": "2024-11-13T15:31:37Z", - "aliases": [ - "CVE-2024-48900" - ], - "details": "A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48900" - }, - { - "type": "WEB", - "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318818" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-200" - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2024-11-13T15:15:07Z" - } -} \ No newline at end of file