Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-43433

Fixed upstream EPSS <1%CVSS 5.3

A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users.

Published 2024-11-11 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.4.2
Packagistmoodle/moodle4.3.6

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix