CVE-2024-33996

Published: May 31, 2024

Modified: Aug 2, 2024

PUBLISHED

Description

Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.

Vendor	Product	Versions
Moodle	Moodle	affected `4.0 - <= 4.3.3` affected `4.2 - <= 4.2.6` affected `4.1 - <= 4.1.9`

Weaknesses (CWE)

CWE-20

References

https://moodle.org/mod/forum/discuss.php?d=458384#p1840909

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-33996

Description

Affected Products

Weaknesses (CWE)

References