A vulnerability, which was classified as problematic, has been found in Moodle up to 4.1.14/4.3.8/4.4.4/4.5.0. Affected by this issue is some unknown functionality of the component Email Change Confirmation Token. The manipulation leads to information disclosure.
This vulnerability is handled as CVE-2024-55645. The attack needs to be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.