CyberRota Analysis
AI-GeneratedMoodle's Report Builder component is vulnerable to an issue where an authenticated attacker can provide an improperly validated audience class name, leading to arbitrary class instantiation. This flaw allows for the unauthorized creation of internal program objects, potentially causing unexpected application behavior. Organizations using Moodle should prioritize this vulnerability to mitigate risks associated with unauthorized access and application instability.
Original NVD Description
A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal program objects, which may result in unexpected application behavior.
Related CVEs
Other vulnerabilities affecting the same vendor(s)