CVE Vulnerabilities

CVE-2024-43428

Insufficient Verification of Data Authenticity

Published: Nov 07, 2024 | Modified: May 01, 2025
CVSS 3.x
7.1
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

To address a cache poisoning risk in Moodle, additional validation for local storage was required.

Weakness

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle * 4.1.12 (excluding)
Moodle Moodle 4.2.0 (including) 4.2.9 (excluding)
Moodle Moodle 4.3.0 (including) 4.3.6 (excluding)
Moodle Moodle 4.4.0 (including) 4.4.2 (excluding)

References