From 12ccf382afba137913ed6918fc64ae7d28642587 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 13 Nov 2024 18:40:45 +0000
Subject: [PATCH] Publish Advisories

GHSA-g8r3-2v89-j6r5
GHSA-g8r3-2v89-j6r5
---
 .../GHSA-g8r3-2v89-j6r5.json                  | 69 +++++++++++++++++++
 .../GHSA-g8r3-2v89-j6r5.json                  | 35 ----------
 2 files changed, 69 insertions(+), 35 deletions(-)
 create mode 100644 advisories/github-reviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json
 delete mode 100644 advisories/unreviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json

diff --git a/advisories/github-reviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json b/advisories/github-reviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json
new file mode 100644
index 00000000000..2d3f03c0336
--- /dev/null
+++ b/advisories/github-reviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json
@@ -0,0 +1,69 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g8r3-2v89-j6r5",
+  "modified": "2024-11-13T18:38:36Z",
+  "published": "2024-11-13T15:31:37Z",
+  "aliases": [
+    "CVE-2024-48900"
+  ],
+  "summary": "Moodle IDOR when accessing list of badge recipients",
+  "details": "A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "moodle/moodle"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.4.0"
+            },
+            {
+              "fixed": "4.4.4"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48900"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318818"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/moodle/moodle"
+    },
+    {
+      "type": "WEB",
+      "url": "https://moodle.org/mod/forum/discuss.php?d=462879"
+    },
+    {
+      "type": "WEB",
+      "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83178"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-11-13T18:38:36Z",
+    "nvd_published_at": "2024-11-13T15:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json b/advisories/unreviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json
deleted file mode 100644
index 45707189bdf..00000000000
--- a/advisories/unreviewed/2024/11/GHSA-g8r3-2v89-j6r5/GHSA-g8r3-2v89-j6r5.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-g8r3-2v89-j6r5",
-  "modified": "2024-11-13T15:31:37Z",
-  "published": "2024-11-13T15:31:37Z",
-  "aliases": [
-    "CVE-2024-48900"
-  ],
-  "details": "A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.",
-  "severity": [
-
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48900"
-    },
-    {
-      "type": "WEB",
-      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318818"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-200"
-    ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2024-11-13T15:15:07Z"
-  }
-}
\ No newline at end of file