Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-33996

Fixed upstream EPSS <1%CVSS 6.2

Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.

Published 2024-05-31 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.3.4
Packagistmoodle/moodle4.2.7
Packagistmoodle/moodle4.1.10

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix