CVE-2024-1439: Improper Access Control

February 12, 2024

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

References

github.com/advisories/GHSA-5p2x-8427-9fgp
nvd.nist.gov/vuln/detail/CVE-2024-1439
www.incibe.es/en/incibe-cert/notices/aviso/inadequate-access-control-vulnerability-moodle

Code Behaviors & Features

Detect and mitigate CVE-2024-1439 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →