Moodle Authentication Bypass Vulnerability for Suspended Users via LTI Provider

An authentication bypass vulnerability has been identified in Moodle's Learning Tools Interoperability (LTI) Provider. This flaw allows suspended users to authenticate by exploiting LTI authentication handlers, which do not properly enforce suspension statuses. As a result, these users can gain unauthorized access to the system, potentially leading to information disclosure or other unauthorized actions.

Impact

Exploitation of this vulnerability could allow suspended users to access the system and perform actions they are not authorized to, potentially leading to unauthorized information disclosure.