UpHeron
All vulnerabilities

Servers and applications

CVE-2024-1439

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

Severity
Low 3.3
Published
12 Feb 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MoodleServers and applications · cpe:a:moodle:moodle
  • Every version up to 4.2.11

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-1439
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-1439