Moodle Innovación y Cualificación Local Administration Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the Innovación y Cualificación local administration plugin, specifically in the ajax.php file. This vulnerability allows attackers to access sensitive information about other users, including their ID, name, login, and email address.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, such as IDs, names, login credentials, and email addresses.

Remediation

A new version has been released to address these vulnerabilities, and the update has been implemented in all affected installations. The process will be completed by December 2024.