From ad97b67317c848e87dc10cd44395b35b48c457e2 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 12 Feb 2024 12:31:54 +0000
Subject: [PATCH] Publish GHSA-5p2x-8427-9fgp

---
 .../GHSA-5p2x-8427-9fgp.json                  | 38 +++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 advisories/unreviewed/2024/02/GHSA-5p2x-8427-9fgp/GHSA-5p2x-8427-9fgp.json

diff --git a/advisories/unreviewed/2024/02/GHSA-5p2x-8427-9fgp/GHSA-5p2x-8427-9fgp.json b/advisories/unreviewed/2024/02/GHSA-5p2x-8427-9fgp/GHSA-5p2x-8427-9fgp.json
new file mode 100644
index 00000000000..6045f405974
--- /dev/null
+++ b/advisories/unreviewed/2024/02/GHSA-5p2x-8427-9fgp/GHSA-5p2x-8427-9fgp.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5p2x-8427-9fgp",
+  "modified": "2024-02-12T12:30:32Z",
+  "published": "2024-02-12T12:30:32Z",
+  "aliases": [
+    "CVE-2024-1439"
+  ],
+  "details": "Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/inadequate-access-control-vulnerability-moodle"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-12T11:15:08Z"
+  }
+}
\ No newline at end of file