CVE-2024-25983

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-25983
Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).

3.5 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300
https://bugzilla.redhat.com/show_bug.cgi?id=2264099
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
https://moodle.org/mod/forum/discuss.php?d=455641
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300
https://bugzilla.redhat.com/show_bug.cgi?id=2264099
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
https://moodle.org/mod/forum/discuss.php?d=455641
Configurations

No configuration.

History

21 Nov 2024, 09:01

Type Values Removed Values Added
References () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300 - () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=2264099 - () https://bugzilla.redhat.com/show_bug.cgi?id=2264099 -
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ -
References () https://moodle.org/mod/forum/discuss.php?d=455641 - () https://moodle.org/mod/forum/discuss.php?d=455641 -

29 Feb 2024, 03:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ -

20 Feb 2024, 19:50

Type Values Removed Values Added
Summary
  • (es) Las comprobaciones insuficientes en un servicio web hicieron posible agregar comentarios al bloque de comentarios en el panel de otro usuario cuando de otro modo no estaba disponible (por ejemplo, en su página de perfil).

19 Feb 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-19 17:15

Updated : 2024-11-21 09:01

NVD link : CVE-2024-25983

Mitre link : CVE-2024-25983

CVE.ORG link : CVE-2024-25983

JSON object : View

Products Affected

No product.

CWE
CWE-639

Authorization Bypass Through User-Controlled Key