{"action":"Upgrade moodle/moodle to 4.4.4 or later.","affected":[{"fixed":"4.4.4","introduced":"4.4.0"}],"component":"moodle/moodle","cve_ids":["CVE-2024-48900"],"ecosystem":"Packagist","epss":0.0035,"exploited":false,"fixed_versions":["4.4.4"],"ghsa_id":"GHSA-g8r3-2v89-j6r5","id":"tcs_01M5KF2GQRD45FHRFSCAGJ9P88","modified_at":"2025-06-13T06:59:07.279824Z","published_at":"2024-11-13T15:31:37Z","references":["https://osv.dev/vulnerability/GHSA-g8r3-2v89-j6r5","https://nvd.nist.gov/vuln/detail/CVE-2024-48900","https://bugzilla.redhat.com/show_bug.cgi?id=2318818","https://github.com/moodle/moodle","https://moodle.org/mod/forum/discuss.php?d=462879","http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83178"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-g8r3-2v89-j6r5","url":"https://osv.dev/vulnerability/GHSA-g8r3-2v89-j6r5"},{"source":"nvd","source_id":"CVE-2024-48900","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48900"}],"summary":"Moodle IDOR when accessing list of badge recipients"}