Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/moodle/moodle@4.5.0-beta
Typecomposer
Namespacemoodle
Namemoodle
Version4.5.0-beta
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.5.9
Latest_non_vulnerable_version5.1.2
Affected_by_vulnerabilities
0
url VCID-1svf-1dtz-3qey
vulnerability_id VCID-1svf-1dtz-3qey
summary A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3637
reference_id
reference_type
scores
0
value 0.00129
scoring_system epss
scoring_elements 0.31875
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3637
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/052007b7324ef24aebe36a876ffa4fa97fac4f81
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/052007b7324ef24aebe36a876ffa4fa97fac4f81
3
reference_url https://moodle.org/mod/forum/discuss.php?d=467599
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467599
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3637
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3637
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3637
reference_id CVE-2025-3637
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:02Z/
url https://access.redhat.com/security/cve/CVE-2025-3637
6
reference_url https://github.com/advisories/GHSA-9vc3-vm42-fjhm
reference_id GHSA-9vc3-vm42-fjhm
reference_type
scores
url https://github.com/advisories/GHSA-9vc3-vm42-fjhm
7
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-65356
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-65356
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:02Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-65356
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359727
reference_id show_bug.cgi?id=2359727
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:02Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359727
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3637, GHSA-9vc3-vm42-fjhm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1svf-1dtz-3qey
1
url VCID-3dr4-hds3-ckbr
vulnerability_id VCID-3dr4-hds3-ckbr
summary A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67847
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.09012
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67847
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=471297#p1892199
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471297#p1892199
3
reference_url https://access.redhat.com/security/cve/CVE-2025-67847
reference_id CVE-2025-67847
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-24T04:55:19Z/
url https://access.redhat.com/security/cve/CVE-2025-67847
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67847
reference_id CVE-2025-67847
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67847
5
reference_url https://github.com/advisories/GHSA-xvmh-25jw-gmmm
reference_id GHSA-xvmh-25jw-gmmm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xvmh-25jw-gmmm
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67847, GHSA-xvmh-25jw-gmmm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3dr4-hds3-ckbr
2
url VCID-3s11-9e4p-pygy
vulnerability_id VCID-3s11-9e4p-pygy
summary A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67857
reference_id
reference_type
scores
0
value 0.00021
scoring_system epss
scoring_elements 0.06029
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67857
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/ac30e7e19357f696979b7ffd760a7131b6ad88f6
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ac30e7e19357f696979b7ffd760a7131b6ad88f6
3
reference_url https://github.com/moodle/moodle/commit/c6cb8d971257c04a12a2c5d8510a89cb906f46f0
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c6cb8d971257c04a12a2c5d8510a89cb906f46f0
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67857
reference_id CVE-2025-67857
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/
url https://access.redhat.com/security/cve/CVE-2025-67857
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67857
reference_id CVE-2025-67857
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67857
6
reference_url https://moodle.org/mod/forum/discuss.php?d=471307
reference_id discuss.php?d=471307
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/
url https://moodle.org/mod/forum/discuss.php?d=471307
7
reference_url https://github.com/advisories/GHSA-8jrv-wx83-w3xj
reference_id GHSA-8jrv-wx83-w3xj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8jrv-wx83-w3xj
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423868
reference_id show_bug.cgi?id=2423868
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423868
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67857, GHSA-8jrv-wx83-w3xj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3s11-9e4p-pygy
3
url VCID-43r9-m1xz-5qge
vulnerability_id VCID-43r9-m1xz-5qge
summary 
Description information displayed in the site administration live log 
required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26529
reference_id
reference_type
scores
0
value 0.00961
scoring_system epss
scoring_elements 0.7692
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26529
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26529
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26529
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466145
reference_id discuss.php?d=466145
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:38Z/
url https://moodle.org/mod/forum/discuss.php?d=466145
4
reference_url https://github.com/advisories/GHSA-wr88-x8cm-7cgq
reference_id GHSA-wr88-x8cm-7cgq
reference_type
scores
url https://github.com/advisories/GHSA-wr88-x8cm-7cgq
5
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:38Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26529, GHSA-wr88-x8cm-7cgq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-43r9-m1xz-5qge
4
url VCID-46sh-98bs-ybex
vulnerability_id VCID-46sh-98bs-ybex
summary A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32044
reference_id
reference_type
scores
0
value 0.0014
scoring_system epss
scoring_elements 0.33912
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32044
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/41917db65e6b3dba3bf3d805a8599e6752655646
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/41917db65e6b3dba3bf3d805a8599e6752655646
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-32044
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-32044
4
reference_url https://access.redhat.com/security/cve/CVE-2025-32044
reference_id CVE-2025-32044
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:23Z/
url https://access.redhat.com/security/cve/CVE-2025-32044
5
reference_url https://github.com/advisories/GHSA-345q-9jmq-g9q4
reference_id GHSA-345q-9jmq-g9q4
reference_type
scores
url https://github.com/advisories/GHSA-345q-9jmq-g9q4
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2356829
reference_id show_bug.cgi?id=2356829
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:23Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2356829
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.3
purl pkg:composer/moodle/moodle@4.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-7a6m-m4t2-5ydp
4
vulnerability VCID-7zqn-5pyf-pyg9
5
vulnerability VCID-82cj-8rk2-kygn
6
vulnerability VCID-87yg-v5af-mfd4
7
vulnerability VCID-95fs-szzk-c3h5
8
vulnerability VCID-b959-r7ty-3fdj
9
vulnerability VCID-bn3p-ccnj-3ubw
10
vulnerability VCID-c7uy-k6wn-s3f9
11
vulnerability VCID-cra3-6x3q-vkap
12
vulnerability VCID-dye9-hpdz-myc7
13
vulnerability VCID-eaej-5e2e-yfcr
14
vulnerability VCID-ebae-b6eb-s7fr
15
vulnerability VCID-f275-awa8-53gp
16
vulnerability VCID-fsuz-rgpw-8qd4
17
vulnerability VCID-gapa-a9xy-w3be
18
vulnerability VCID-hh6z-2319-83g4
19
vulnerability VCID-kymv-5vap-7qf7
20
vulnerability VCID-n5hx-mc7q-sua6
21
vulnerability VCID-nsvy-6gvu-wqe1
22
vulnerability VCID-nw7f-9kxh-dfer
23
vulnerability VCID-pg53-92qn-67f4
24
vulnerability VCID-pv24-2amy-4yb9
25
vulnerability VCID-s97q-jcmh-ukdh
26
vulnerability VCID-sja2-g5vp-tqev
27
vulnerability VCID-tr6w-mqxr-vueh
28
vulnerability VCID-wr3n-bk11-a3bj
29
vulnerability VCID-x3bb-7vq7-aqaa
30
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.3
aliases CVE-2025-32044, GHSA-345q-9jmq-g9q4
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-46sh-98bs-ybex
5
url VCID-57uf-tz1x-akdt
vulnerability_id VCID-57uf-tz1x-akdt
summary A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67851
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.19737
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67851
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/29820c5ff4ef381c7a743091ec5c68ac82903b22
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/29820c5ff4ef381c7a743091ec5c68ac82903b22
3
reference_url https://github.com/moodle/moodle/commit/aa66bacd0783cbc33528fba9c2adca1f685a59bd
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/aa66bacd0783cbc33528fba9c2adca1f685a59bd
4
reference_url https://github.com/moodle/moodle/commit/dc57ccc491a2a04032445a3ee92fd0d335ebd746
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/dc57ccc491a2a04032445a3ee92fd0d335ebd746
5
reference_url https://access.redhat.com/security/cve/CVE-2025-67851
reference_id CVE-2025-67851
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/
url https://access.redhat.com/security/cve/CVE-2025-67851
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67851
reference_id CVE-2025-67851
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67851
7
reference_url https://moodle.org/mod/forum/discuss.php?d=471301
reference_id discuss.php?d=471301
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/
url https://moodle.org/mod/forum/discuss.php?d=471301
8
reference_url https://github.com/advisories/GHSA-qfh6-h7j6-fvjv
reference_id GHSA-qfh6-h7j6-fvjv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qfh6-h7j6-fvjv
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423841
reference_id show_bug.cgi?id=2423841
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423841
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67851, GHSA-qfh6-h7j6-fvjv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-57uf-tz1x-akdt
6
url VCID-67tn-z6kv-vybp
vulnerability_id VCID-67tn-z6kv-vybp
summary A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32045
reference_id
reference_type
scores
0
value 0.00154
scoring_system epss
scoring_elements 0.3591
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32045
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=467086
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467086
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-32045
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-32045
5
reference_url https://access.redhat.com/security/cve/CVE-2025-32045
reference_id CVE-2025-32045
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:20Z/
url https://access.redhat.com/security/cve/CVE-2025-32045
6
reference_url https://github.com/advisories/GHSA-8m7c-hm88-2p97
reference_id GHSA-8m7c-hm88-2p97
reference_type
scores
url https://github.com/advisories/GHSA-8m7c-hm88-2p97
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2356835
reference_id show_bug.cgi?id=2356835
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:20Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2356835
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.3
purl pkg:composer/moodle/moodle@4.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-7a6m-m4t2-5ydp
4
vulnerability VCID-7zqn-5pyf-pyg9
5
vulnerability VCID-82cj-8rk2-kygn
6
vulnerability VCID-87yg-v5af-mfd4
7
vulnerability VCID-95fs-szzk-c3h5
8
vulnerability VCID-b959-r7ty-3fdj
9
vulnerability VCID-bn3p-ccnj-3ubw
10
vulnerability VCID-c7uy-k6wn-s3f9
11
vulnerability VCID-cra3-6x3q-vkap
12
vulnerability VCID-dye9-hpdz-myc7
13
vulnerability VCID-eaej-5e2e-yfcr
14
vulnerability VCID-ebae-b6eb-s7fr
15
vulnerability VCID-f275-awa8-53gp
16
vulnerability VCID-fsuz-rgpw-8qd4
17
vulnerability VCID-gapa-a9xy-w3be
18
vulnerability VCID-hh6z-2319-83g4
19
vulnerability VCID-kymv-5vap-7qf7
20
vulnerability VCID-n5hx-mc7q-sua6
21
vulnerability VCID-nsvy-6gvu-wqe1
22
vulnerability VCID-nw7f-9kxh-dfer
23
vulnerability VCID-pg53-92qn-67f4
24
vulnerability VCID-pv24-2amy-4yb9
25
vulnerability VCID-s97q-jcmh-ukdh
26
vulnerability VCID-sja2-g5vp-tqev
27
vulnerability VCID-tr6w-mqxr-vueh
28
vulnerability VCID-wr3n-bk11-a3bj
29
vulnerability VCID-x3bb-7vq7-aqaa
30
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.3
aliases CVE-2025-32045, GHSA-8m7c-hm88-2p97
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-67tn-z6kv-vybp
7
url VCID-7a6m-m4t2-5ydp
vulnerability_id VCID-7a6m-m4t2-5ydp
summary A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3645
reference_id
reference_type
scores
0
value 0.00096
scoring_system epss
scoring_elements 0.26604
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3645
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/2fd810c8981f9b10087467a3b8fce779b157200f
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/2fd810c8981f9b10087467a3b8fce779b157200f
3
reference_url https://github.com/moodle/moodle/commit/a8179842b450659c288f284e06361a4fbab8742a
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a8179842b450659c288f284e06361a4fbab8742a
4
reference_url https://github.com/moodle/moodle/commit/bb65effe41524d8373c1dc499c3323ac469ea558
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bb65effe41524d8373c1dc499c3323ac469ea558
5
reference_url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-72704&type=commits
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-72704&type=commits
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3645
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3645
7
reference_url https://access.redhat.com/security/cve/CVE-2025-3645
reference_id CVE-2025-3645
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/
url https://access.redhat.com/security/cve/CVE-2025-3645
8
reference_url https://moodle.org/mod/forum/discuss.php?d=467606
reference_id discuss.php?d=467606
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/
url https://moodle.org/mod/forum/discuss.php?d=467606
9
reference_url https://github.com/advisories/GHSA-pj96-xh2w-fgqx
reference_id GHSA-pj96-xh2w-fgqx
reference_type
scores
url https://github.com/advisories/GHSA-pj96-xh2w-fgqx
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359761
reference_id show_bug.cgi?id=2359761
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359761
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3645, GHSA-pj96-xh2w-fgqx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7a6m-m4t2-5ydp
8
url VCID-7zqn-5pyf-pyg9
vulnerability_id VCID-7zqn-5pyf-pyg9
summary A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3641
reference_id
reference_type
scores
0
value 0.00667
scoring_system epss
scoring_elements 0.71745
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3641
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/27b839b5c60389623ca8e3496792b43a44527cd6
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/27b839b5c60389623ca8e3496792b43a44527cd6
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3641
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3641
4
reference_url https://access.redhat.com/security/cve/CVE-2025-3641
reference_id CVE-2025-3641
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/
url https://access.redhat.com/security/cve/CVE-2025-3641
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467602
reference_id discuss.php?d=467602
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/
url https://moodle.org/mod/forum/discuss.php?d=467602
6
reference_url https://github.com/advisories/GHSA-c8v6-vxhf-wcrr
reference_id GHSA-c8v6-vxhf-wcrr
reference_type
scores
url https://github.com/advisories/GHSA-c8v6-vxhf-wcrr
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359735
reference_id show_bug.cgi?id=2359735
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359735
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3641, GHSA-c8v6-vxhf-wcrr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7zqn-5pyf-pyg9
9
url VCID-82cj-8rk2-kygn
vulnerability_id VCID-82cj-8rk2-kygn
summary A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26045
reference_id
reference_type
scores
0
value 0.00113
scoring_system epss
scoring_elements 0.2953
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26045
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da
3
reference_url https://moodle.org/mod/forum/discuss.php?d=473314
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=473314
4
reference_url https://access.redhat.com/security/cve/CVE-2026-26045
reference_id CVE-2026-26045
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/
url https://access.redhat.com/security/cve/CVE-2026-26045
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26045
reference_id CVE-2026-26045
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26045
6
reference_url https://github.com/advisories/GHSA-ggxq-2mg9-8966
reference_id GHSA-ggxq-2mg9-8966
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ggxq-2mg9-8966
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440901
reference_id show_bug.cgi?id=2440901
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2440901
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.9
purl pkg:composer/moodle/moodle@4.5.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9
1
url pkg:composer/moodle/moodle@5.0.5
purl pkg:composer/moodle/moodle@5.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5
2
url pkg:composer/moodle/moodle@5.1.2
purl pkg:composer/moodle/moodle@5.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2
aliases CVE-2026-26045, GHSA-ggxq-2mg9-8966
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-82cj-8rk2-kygn
10
url VCID-87yg-v5af-mfd4
vulnerability_id VCID-87yg-v5af-mfd4
summary A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3643
reference_id
reference_type
scores
0
value 0.0013
scoring_system epss
scoring_elements 0.32067
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3643
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/ff9bbd6d9e7d6267ce85e6c9afbeb19581f2a85f
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ff9bbd6d9e7d6267ce85e6c9afbeb19581f2a85f
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3643
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3643
4
reference_url https://access.redhat.com/security/cve/CVE-2025-3643
reference_id CVE-2025-3643
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/
url https://access.redhat.com/security/cve/CVE-2025-3643
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467604
reference_id discuss.php?d=467604
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/
url https://moodle.org/mod/forum/discuss.php?d=467604
6
reference_url https://github.com/advisories/GHSA-hxgg-4qww-85ph
reference_id GHSA-hxgg-4qww-85ph
reference_type
scores
url https://github.com/advisories/GHSA-hxgg-4qww-85ph
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359742
reference_id show_bug.cgi?id=2359742
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359742
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3643, GHSA-hxgg-4qww-85ph
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-87yg-v5af-mfd4
11
url VCID-8ydw-ymjw-4qhd
vulnerability_id VCID-8ydw-ymjw-4qhd
summary Insufficient capability checks made it possible to disable badges a user does not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26531
reference_id
reference_type
scores
0
value 0.00345
scoring_system epss
scoring_elements 0.57449
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26531
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26531
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26531
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466148
reference_id discuss.php?d=466148
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:42Z/
url https://moodle.org/mod/forum/discuss.php?d=466148
4
reference_url https://github.com/advisories/GHSA-g88w-v4cq-qgcp
reference_id GHSA-g88w-v4cq-qgcp
reference_type
scores
url https://github.com/advisories/GHSA-g88w-v4cq-qgcp
5
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:42Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26531, GHSA-g88w-v4cq-qgcp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8ydw-ymjw-4qhd
12
url VCID-95fs-szzk-c3h5
vulnerability_id VCID-95fs-szzk-c3h5
summary A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3640
reference_id
reference_type
scores
0
value 0.00163
scoring_system epss
scoring_elements 0.37062
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3640
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/64a4311266cbe9a9a942c836931bef224018b77d
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/64a4311266cbe9a9a942c836931bef224018b77d
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3640
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3640
4
reference_url https://access.redhat.com/security/cve/CVE-2025-3640
reference_id CVE-2025-3640
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/
url https://access.redhat.com/security/cve/CVE-2025-3640
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467601
reference_id discuss.php?d=467601
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/
url https://moodle.org/mod/forum/discuss.php?d=467601
6
reference_url https://github.com/advisories/GHSA-6g5x-h5x7-q4mq
reference_id GHSA-6g5x-h5x7-q4mq
reference_type
scores
url https://github.com/advisories/GHSA-6g5x-h5x7-q4mq
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359734
reference_id show_bug.cgi?id=2359734
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359734
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3640, GHSA-6g5x-h5x7-q4mq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-95fs-szzk-c3h5
13
url VCID-b959-r7ty-3fdj
vulnerability_id VCID-b959-r7ty-3fdj
summary A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3628
reference_id
reference_type
scores
0
value 0.00111
scoring_system epss
scoring_elements 0.29109
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3628
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/5c703f7b4944dd0cc940ca20adfd91e6a2d98a66
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/5c703f7b4944dd0cc940ca20adfd91e6a2d98a66
3
reference_url https://moodle.org/mod/forum/discuss.php?d=467595
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467595
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3628
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3628
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3628
reference_id CVE-2025-3628
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:14Z/
url https://access.redhat.com/security/cve/CVE-2025-3628
6
reference_url https://github.com/advisories/GHSA-69m9-rprc-2x7g
reference_id GHSA-69m9-rprc-2x7g
reference_type
scores
url https://github.com/advisories/GHSA-69m9-rprc-2x7g
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359706
reference_id show_bug.cgi?id=2359706
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:14Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359706
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3628, GHSA-69m9-rprc-2x7g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b959-r7ty-3fdj
14
url VCID-bn3p-ccnj-3ubw
vulnerability_id VCID-bn3p-ccnj-3ubw
summary A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not have permission to modify.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3644
reference_id
reference_type
scores
0
value 0.00175
scoring_system epss
scoring_elements 0.38835
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3644
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-83994&type=commits
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-83994&type=commits
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3644
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3644
4
reference_url https://access.redhat.com/security/cve/CVE-2025-3644
reference_id CVE-2025-3644
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/
url https://access.redhat.com/security/cve/CVE-2025-3644
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467605
reference_id discuss.php?d=467605
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/
url https://moodle.org/mod/forum/discuss.php?d=467605
6
reference_url https://github.com/advisories/GHSA-cpm7-mv33-jwf8
reference_id GHSA-cpm7-mv33-jwf8
reference_type
scores
url https://github.com/advisories/GHSA-cpm7-mv33-jwf8
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359745
reference_id show_bug.cgi?id=2359745
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359745
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3644, GHSA-cpm7-mv33-jwf8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bn3p-ccnj-3ubw
15
url VCID-c7uy-k6wn-s3f9
vulnerability_id VCID-c7uy-k6wn-s3f9
summary A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3636
reference_id
reference_type
scores
0
value 0.00102
scoring_system epss
scoring_elements 0.27607
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3636
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0bd97209ac5e217dbec236c73e4f6fdcaee1c737
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0bd97209ac5e217dbec236c73e4f6fdcaee1c737
3
reference_url https://moodle.org/mod/forum/discuss.php?d=467598
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467598
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3636
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3636
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3636
reference_id CVE-2025-3636
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/
url https://access.redhat.com/security/cve/CVE-2025-3636
6
reference_url https://github.com/advisories/GHSA-chmf-m33p-ph8m
reference_id GHSA-chmf-m33p-ph8m
reference_type
scores
url https://github.com/advisories/GHSA-chmf-m33p-ph8m
7
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359726
reference_id show_bug.cgi?id=2359726
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359726
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3636, GHSA-chmf-m33p-ph8m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c7uy-k6wn-s3f9
16
url VCID-cra3-6x3q-vkap
vulnerability_id VCID-cra3-6x3q-vkap
summary A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-controlled pages after they have successfully authenticated. This occurs due to insufficient validation of redirect parameters, which could lead to phishing attacks or information disclosure.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67852
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.0353
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67852
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/fa1624c8c9e3efa917f0e9d2666bb59d8be2a975
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/fa1624c8c9e3efa917f0e9d2666bb59d8be2a975
3
reference_url https://moodle.org/mod/forum/discuss.php?d=471302
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471302
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67852
reference_id CVE-2025-67852
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:44:09Z/
url https://access.redhat.com/security/cve/CVE-2025-67852
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67852
reference_id CVE-2025-67852
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67852
6
reference_url https://github.com/advisories/GHSA-qv78-6gpp-hm68
reference_id GHSA-qv78-6gpp-hm68
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qv78-6gpp-hm68
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423844
reference_id show_bug.cgi?id=2423844
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:44:09Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423844
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67852, GHSA-qv78-6gpp-hm68
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cra3-6x3q-vkap
17
url VCID-dye9-hpdz-myc7
vulnerability_id VCID-dye9-hpdz-myc7
summary Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62394
reference_id
reference_type
scores
0
value 0.00051
scoring_system epss
scoring_elements 0.16311
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62394
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/022bfbfb564d8f3866a43d26eed215213bbdd28a
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/022bfbfb564d8f3866a43d26eed215213bbdd28a
3
reference_url https://moodle.org/mod/forum/discuss.php?d=470383
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470383
4
reference_url https://access.redhat.com/security/cve/CVE-2025-62394
reference_id CVE-2025-62394
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:14:03Z/
url https://access.redhat.com/security/cve/CVE-2025-62394
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62394
reference_id CVE-2025-62394
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62394
6
reference_url https://github.com/advisories/GHSA-8fcv-4qp9-pg32
reference_id GHSA-8fcv-4qp9-pg32
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8fcv-4qp9-pg32
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404427
reference_id show_bug.cgi?id=2404427
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:14:03Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404427
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
1
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62394, GHSA-8fcv-4qp9-pg32
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dye9-hpdz-myc7
18
url VCID-eaej-5e2e-yfcr
vulnerability_id VCID-eaej-5e2e-yfcr
summary A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3647
reference_id
reference_type
scores
0
value 0.00096
scoring_system epss
scoring_elements 0.26604
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3647
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/bd6ec0ac84cf0f73ab35e7e244e1f9b06929083a
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bd6ec0ac84cf0f73ab35e7e244e1f9b06929083a
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3647
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3647
4
reference_url https://access.redhat.com/security/cve/CVE-2025-3647
reference_id CVE-2025-3647
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/
url https://access.redhat.com/security/cve/CVE-2025-3647
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467607
reference_id discuss.php?d=467607
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/
url https://moodle.org/mod/forum/discuss.php?d=467607
6
reference_url https://github.com/advisories/GHSA-34g7-pg9j-pxgp
reference_id GHSA-34g7-pg9j-pxgp
reference_type
scores
url https://github.com/advisories/GHSA-34g7-pg9j-pxgp
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359762
reference_id show_bug.cgi?id=2359762
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359762
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3647, GHSA-34g7-pg9j-pxgp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eaej-5e2e-yfcr
19
url VCID-ebae-b6eb-s7fr
vulnerability_id VCID-ebae-b6eb-s7fr
summary A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enumerate or guess user credentials, facilitating brute-force attacks against user accounts.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67853
reference_id
reference_type
scores
0
value 0.00035
scoring_system epss
scoring_elements 0.10889
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67853
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=471303
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471303
3
reference_url https://access.redhat.com/security/cve/CVE-2025-67853
reference_id CVE-2025-67853
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:42Z/
url https://access.redhat.com/security/cve/CVE-2025-67853
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67853
reference_id CVE-2025-67853
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67853
5
reference_url https://github.com/advisories/GHSA-5cx4-w4fh-fr57
reference_id GHSA-5cx4-w4fh-fr57
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5cx4-w4fh-fr57
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423847
reference_id show_bug.cgi?id=2423847
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:42Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423847
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67853, GHSA-5cx4-w4fh-fr57
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ebae-b6eb-s7fr
20
url VCID-f275-awa8-53gp
vulnerability_id VCID-f275-awa8-53gp
summary An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62396
reference_id
reference_type
scores
0
value 0.00043
scoring_system epss
scoring_elements 0.13579
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62396
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/5d4910509eeaac8403d18ec8f259e29d2f11527e
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/5d4910509eeaac8403d18ec8f259e29d2f11527e
3
reference_url https://github.com/moodle/moodle/commit/5e7d5abc483d0511ebfc2042075eabcc392ff4ce
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/5e7d5abc483d0511ebfc2042075eabcc392ff4ce
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470385
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470385
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62396
reference_id CVE-2025-62396
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:12:55Z/
url https://access.redhat.com/security/cve/CVE-2025-62396
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62396
reference_id CVE-2025-62396
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62396
7
reference_url https://github.com/advisories/GHSA-c5cj-xp43-qcc3
reference_id GHSA-c5cj-xp43-qcc3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c5cj-xp43-qcc3
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404429
reference_id show_bug.cgi?id=2404429
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:12:55Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404429
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
1
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62396, GHSA-c5cj-xp43-qcc3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f275-awa8-53gp
21
url VCID-fsuz-rgpw-8qd4
vulnerability_id VCID-fsuz-rgpw-8qd4
summary A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67848
reference_id
reference_type
scores
0
value 0.00048
scoring_system epss
scoring_elements 0.15445
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67848
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/62f372e9d861d16df702d3c7726905fa2730e3d8
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/62f372e9d861d16df702d3c7726905fa2730e3d8
3
reference_url https://github.com/moodle/moodle/commit/c2705e2c18962fec4f21b9c34ed386be2a379663
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c2705e2c18962fec4f21b9c34ed386be2a379663
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67848
reference_id CVE-2025-67848
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://access.redhat.com/security/cve/CVE-2025-67848
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67848
reference_id CVE-2025-67848
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67848
6
reference_url https://moodle.org/mod/forum/discuss.php?d=471298
reference_id discuss.php?d=471298
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://moodle.org/mod/forum/discuss.php?d=471298
7
reference_url https://github.com/advisories/GHSA-j5jv-w5cw-j9ff
reference_id GHSA-j5jv-w5cw-j9ff
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j5jv-w5cw-j9ff
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423831
reference_id show_bug.cgi?id=2423831
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423831
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67848, GHSA-j5jv-w5cw-j9ff
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fsuz-rgpw-8qd4
22
url VCID-gapa-a9xy-w3be
vulnerability_id VCID-gapa-a9xy-w3be
summary A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67850
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01915
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67850
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/c85f153068a717a3b28bc122e75154bac99e67e1
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c85f153068a717a3b28bc122e75154bac99e67e1
3
reference_url https://moodle.org/mod/forum/discuss.php?d=471300
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471300
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67850
reference_id CVE-2025-67850
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:48Z/
url https://access.redhat.com/security/cve/CVE-2025-67850
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67850
reference_id CVE-2025-67850
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67850
6
reference_url https://github.com/advisories/GHSA-6mmv-f6c6-v6q8
reference_id GHSA-6mmv-f6c6-v6q8
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6mmv-f6c6-v6q8
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423838
reference_id show_bug.cgi?id=2423838
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:48Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423838
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67850, GHSA-6mmv-f6c6-v6q8
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gapa-a9xy-w3be
23
url VCID-hh6z-2319-83g4
vulnerability_id VCID-hh6z-2319-83g4
summary A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67855
reference_id
reference_type
scores
0
value 0.00038
scoring_system epss
scoring_elements 0.11765
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67855
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0c146aa2612fb6d0544f200a018cb42da75db713
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0c146aa2612fb6d0544f200a018cb42da75db713
3
reference_url https://moodle.org/mod/forum/discuss.php?d=471305
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471305
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67855
reference_id CVE-2025-67855
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:09Z/
url https://access.redhat.com/security/cve/CVE-2025-67855
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67855
reference_id CVE-2025-67855
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67855
6
reference_url https://github.com/advisories/GHSA-vwhw-vp9v-q9c9
reference_id GHSA-vwhw-vp9v-q9c9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vwhw-vp9v-q9c9
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423861
reference_id show_bug.cgi?id=2423861
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:09Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423861
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67855, GHSA-vwhw-vp9v-q9c9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hh6z-2319-83g4
24
url VCID-j897-5zfk-rbhk
vulnerability_id VCID-j897-5zfk-rbhk
summary An SQL injection risk was identified in the module list filter within course search.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26533
reference_id
reference_type
scores
0
value 0.00402
scoring_system epss
scoring_elements 0.61244
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26533
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/1310e64699807ead6c38ee89354ac57c503c2836
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/1310e64699807ead6c38ee89354ac57c503c2836
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26533
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26533
4
reference_url https://moodle.org/mod/forum/discuss.php?d=466150
reference_id discuss.php?d=466150
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:35:13Z/
url https://moodle.org/mod/forum/discuss.php?d=466150
5
reference_url https://github.com/advisories/GHSA-rg56-94j7-hjx9
reference_id GHSA-rg56-94j7-hjx9
reference_type
scores
url https://github.com/advisories/GHSA-rg56-94j7-hjx9
6
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:35:13Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26533, GHSA-rg56-94j7-hjx9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j897-5zfk-rbhk
25
url VCID-jn27-7e3d-1uc6
vulnerability_id VCID-jn27-7e3d-1uc6
summary The question bank filter required additional sanitizing to prevent a reflected XSS risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26530
reference_id
reference_type
scores
0
value 0.00957
scoring_system epss
scoring_elements 0.76875
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26530
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26530
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26530
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466146
reference_id discuss.php?d=466146
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:56Z/
url https://moodle.org/mod/forum/discuss.php?d=466146
4
reference_url https://github.com/advisories/GHSA-4w32-c9g7-27qx
reference_id GHSA-4w32-c9g7-27qx
reference_type
scores
url https://github.com/advisories/GHSA-4w32-c9g7-27qx
5
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84146
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84146
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:56Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84146
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26530, GHSA-4w32-c9g7-27qx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jn27-7e3d-1uc6
26
url VCID-kymv-5vap-7qf7
vulnerability_id VCID-kymv-5vap-7qf7
summary An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62401
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.12989
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62401
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb
3
reference_url https://moodle.org/mod/forum/discuss.php?d=470390
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470390
4
reference_url https://access.redhat.com/security/cve/CVE-2025-62401
reference_id CVE-2025-62401
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/
url https://access.redhat.com/security/cve/CVE-2025-62401
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62401
reference_id CVE-2025-62401
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62401
6
reference_url https://github.com/advisories/GHSA-w29j-8phw-ffjf
reference_id GHSA-w29j-8phw-ffjf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w29j-8phw-ffjf
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404434
reference_id show_bug.cgi?id=2404434
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404434
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
1
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62401, GHSA-w29j-8phw-ffjf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kymv-5vap-7qf7
27
url VCID-n5hx-mc7q-sua6
vulnerability_id VCID-n5hx-mc7q-sua6
summary A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3638
reference_id
reference_type
scores
0
value 0.00235
scoring_system epss
scoring_elements 0.46584
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3638
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/91e6ad43ed2522f9c1c4094e565b5a7e5b348728
reference_id
reference_type
scores
0
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/91e6ad43ed2522f9c1c4094e565b5a7e5b348728
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3638
reference_id
reference_type
scores
0
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3638
4
reference_url https://access.redhat.com/security/cve/CVE-2025-3638
reference_id CVE-2025-3638
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/
url https://access.redhat.com/security/cve/CVE-2025-3638
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467600
reference_id discuss.php?d=467600
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/
url https://moodle.org/mod/forum/discuss.php?d=467600
6
reference_url https://github.com/advisories/GHSA-m8qh-hx4c-h9hr
reference_id GHSA-m8qh-hx4c-h9hr
reference_type
scores
url https://github.com/advisories/GHSA-m8qh-hx4c-h9hr
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359732
reference_id show_bug.cgi?id=2359732
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359732
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3638, GHSA-m8qh-hx4c-h9hr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n5hx-mc7q-sua6
28
url VCID-nsvy-6gvu-wqe1
vulnerability_id VCID-nsvy-6gvu-wqe1
summary A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26047
reference_id
reference_type
scores
0
value 0.00094
scoring_system epss
scoring_elements 0.26136
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26047
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c
3
reference_url https://moodle.org/mod/forum/discuss.php?d=473316
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=473316
4
reference_url https://access.redhat.com/security/cve/CVE-2026-26047
reference_id CVE-2026-26047
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/
url https://access.redhat.com/security/cve/CVE-2026-26047
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26047
reference_id CVE-2026-26047
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26047
6
reference_url https://github.com/advisories/GHSA-cg8j-5cr2-568q
reference_id GHSA-cg8j-5cr2-568q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cg8j-5cr2-568q
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440905
reference_id show_bug.cgi?id=2440905
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2440905
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.9
purl pkg:composer/moodle/moodle@4.5.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9
1
url pkg:composer/moodle/moodle@5.0.5
purl pkg:composer/moodle/moodle@5.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5
2
url pkg:composer/moodle/moodle@5.1.2
purl pkg:composer/moodle/moodle@5.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2
aliases CVE-2026-26047, GHSA-cg8j-5cr2-568q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nsvy-6gvu-wqe1
29
url VCID-nw7f-9kxh-dfer
vulnerability_id VCID-nw7f-9kxh-dfer
summary A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to privilege escalation or unauthorized access to certain features.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67856
reference_id
reference_type
scores
0
value 0.00022
scoring_system epss
scoring_elements 0.06494
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67856
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0d48779e61bcacbabbcb82858a037b567351fce0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0d48779e61bcacbabbcb82858a037b567351fce0
3
reference_url https://moodle.org/mod/forum/discuss.php?d=471306
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471306
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67856
reference_id CVE-2025-67856
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:42:42Z/
url https://access.redhat.com/security/cve/CVE-2025-67856
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67856
reference_id CVE-2025-67856
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67856
6
reference_url https://github.com/advisories/GHSA-hcm6-q6pc-xfhm
reference_id GHSA-hcm6-q6pc-xfhm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hcm6-q6pc-xfhm
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423864
reference_id show_bug.cgi?id=2423864
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:42:42Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423864
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67856, GHSA-hcm6-q6pc-xfhm
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nw7f-9kxh-dfer
30
url VCID-pg53-92qn-67f4
vulnerability_id VCID-pg53-92qn-67f4
summary Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62400
reference_id
reference_type
scores
0
value 0.00059
scoring_system epss
scoring_elements 0.18823
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62400
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05
3
reference_url https://moodle.org/mod/forum/discuss.php?d=470389
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470389
4
reference_url https://access.redhat.com/security/cve/CVE-2025-62400
reference_id CVE-2025-62400
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/
url https://access.redhat.com/security/cve/CVE-2025-62400
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62400
reference_id CVE-2025-62400
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62400
6
reference_url https://github.com/advisories/GHSA-422v-w6c5-vq42
reference_id GHSA-422v-w6c5-vq42
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-422v-w6c5-vq42
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404433
reference_id show_bug.cgi?id=2404433
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404433
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
1
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62400, GHSA-422v-w6c5-vq42
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pg53-92qn-67f4
31
url VCID-pv24-2amy-4yb9
vulnerability_id VCID-pv24-2amy-4yb9
summary A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication (2FA).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3627
reference_id
reference_type
scores
0
value 0.00098
scoring_system epss
scoring_elements 0.26862
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3627
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-84351&type=commits
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-84351&type=commits
3
reference_url https://moodle.org/mod/forum/discuss.php?d=467594
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467594
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3627
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3627
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3627
reference_id CVE-2025-3627
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:17Z/
url https://access.redhat.com/security/cve/CVE-2025-3627
6
reference_url https://github.com/advisories/GHSA-x45j-jq9q-gf3q
reference_id GHSA-x45j-jq9q-gf3q
reference_type
scores
url https://github.com/advisories/GHSA-x45j-jq9q-gf3q
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359692
reference_id show_bug.cgi?id=2359692
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:17Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359692
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3627, GHSA-x45j-jq9q-gf3q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pv24-2amy-4yb9
32
url VCID-s97q-jcmh-ukdh
vulnerability_id VCID-s97q-jcmh-ukdh
summary A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary safety checks. Specifically, users can sign up for courses prematurely, even if they haven't finished two-step verification processes.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3634
reference_id
reference_type
scores
0
value 0.00149
scoring_system epss
scoring_elements 0.35203
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3634
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/b0965139014b459c3cb96e4fff45af4d5e09e261
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/b0965139014b459c3cb96e4fff45af4d5e09e261
3
reference_url https://moodle.org/mod/forum/discuss.php?d=467596
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467596
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3634
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3634
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3634
reference_id CVE-2025-3634
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T14:23:56Z/
url https://access.redhat.com/security/cve/CVE-2025-3634
6
reference_url https://github.com/advisories/GHSA-qhc7-xhc2-7p7w
reference_id GHSA-qhc7-xhc2-7p7w
reference_type
scores
url https://github.com/advisories/GHSA-qhc7-xhc2-7p7w
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359707
reference_id show_bug.cgi?id=2359707
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T14:23:56Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359707
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3634, GHSA-qhc7-xhc2-7p7w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s97q-jcmh-ukdh
33
url VCID-sja2-g5vp-tqev
vulnerability_id VCID-sja2-g5vp-tqev
summary A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3642
reference_id
reference_type
scores
0
value 0.00667
scoring_system epss
scoring_elements 0.71745
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3642
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599da
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599da
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3642
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3642
4
reference_url https://access.redhat.com/security/cve/CVE-2025-3642
reference_id CVE-2025-3642
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/
url https://access.redhat.com/security/cve/CVE-2025-3642
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467603
reference_id discuss.php?d=467603
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/
url https://moodle.org/mod/forum/discuss.php?d=467603
6
reference_url https://github.com/advisories/GHSA-m367-445c-2xqr
reference_id GHSA-m367-445c-2xqr
reference_type
scores
url https://github.com/advisories/GHSA-m367-445c-2xqr
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359738
reference_id show_bug.cgi?id=2359738
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359738
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3642, GHSA-m367-445c-2xqr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sja2-g5vp-tqev
34
url VCID-tr6w-mqxr-vueh
vulnerability_id VCID-tr6w-mqxr-vueh
summary Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62399
reference_id
reference_type
scores
0
value 0.00088
scoring_system epss
scoring_elements 0.25169
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62399
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a
3
reference_url https://moodle.org/mod/forum/discuss.php?d=470388
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470388
4
reference_url https://access.redhat.com/security/cve/CVE-2025-62399
reference_id CVE-2025-62399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/
url https://access.redhat.com/security/cve/CVE-2025-62399
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62399
reference_id CVE-2025-62399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62399
6
reference_url https://github.com/advisories/GHSA-m58f-9pvv-8mp2
reference_id GHSA-m58f-9pvv-8mp2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m58f-9pvv-8mp2
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404432
reference_id show_bug.cgi?id=2404432
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404432
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
1
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62399, GHSA-m58f-9pvv-8mp2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tr6w-mqxr-vueh
35
url VCID-uc4c-cw57-tyfp
vulnerability_id VCID-uc4c-cw57-tyfp
summary The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26528
reference_id
reference_type
scores
0
value 0.00706
scoring_system epss
scoring_elements 0.72619
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26528
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26528
reference_id
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26528
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466144
reference_id discuss.php?d=466144
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-24T20:03:52Z/
url https://moodle.org/mod/forum/discuss.php?d=466144
4
reference_url https://github.com/advisories/GHSA-h697-w4ph-7pcx
reference_id GHSA-h697-w4ph-7pcx
reference_type
scores
url https://github.com/advisories/GHSA-h697-w4ph-7pcx
5
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-24T20:03:52Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26528, GHSA-h697-w4ph-7pcx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uc4c-cw57-tyfp
36
url VCID-w84c-jzp6-zkee
vulnerability_id VCID-w84c-jzp6-zkee
summary Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26532
reference_id
reference_type
scores
0
value 0.00345
scoring_system epss
scoring_elements 0.5743
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26532
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26532
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26532
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466149
reference_id discuss.php?d=466149
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:04Z/
url https://moodle.org/mod/forum/discuss.php?d=466149
4
reference_url https://github.com/advisories/GHSA-cw24-f6fq-7j9v
reference_id GHSA-cw24-f6fq-7j9v
reference_type
scores
url https://github.com/advisories/GHSA-cw24-f6fq-7j9v
5
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:04Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26532, GHSA-cw24-f6fq-7j9v
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w84c-jzp6-zkee
37
url VCID-wr3n-bk11-a3bj
vulnerability_id VCID-wr3n-bk11-a3bj
summary A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62398
reference_id
reference_type
scores
0
value 0.00069
scoring_system epss
scoring_elements 0.21348
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62398
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/67005f8b2098096f4c7ca4f78ab9ce69415d703b
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/67005f8b2098096f4c7ca4f78ab9ce69415d703b
3
reference_url https://github.com/moodle/moodle/commit/a2078f781ae065ca1f781bd159c7615c84afcaa5
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a2078f781ae065ca1f781bd159c7615c84afcaa5
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470387
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470387
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62398
reference_id CVE-2025-62398
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:57:39Z/
url https://access.redhat.com/security/cve/CVE-2025-62398
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62398
reference_id CVE-2025-62398
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62398
7
reference_url https://github.com/advisories/GHSA-25wf-7x6c-wmpf
reference_id GHSA-25wf-7x6c-wmpf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-25wf-7x6c-wmpf
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404431
reference_id show_bug.cgi?id=2404431
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:57:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404431
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
1
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-ebae-b6eb-s7fr
6
vulnerability VCID-fsuz-rgpw-8qd4
7
vulnerability VCID-gapa-a9xy-w3be
8
vulnerability VCID-hh6z-2319-83g4
9
vulnerability VCID-nsvy-6gvu-wqe1
10
vulnerability VCID-nw7f-9kxh-dfer
11
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62398, GHSA-25wf-7x6c-wmpf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wr3n-bk11-a3bj
38
url VCID-wsj3-x2v5-y7gc
vulnerability_id VCID-wsj3-x2v5-y7gc
summary 
Separate Groups mode restrictions were not factored into permission 
checks before allowing viewing or deletion of responses in Feedback 
activities.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26526
reference_id
reference_type
scores
0
value 0.00381
scoring_system epss
scoring_elements 0.59927
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26526
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26526
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26526
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466142
reference_id discuss.php?d=466142
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:58:41Z/
url https://moodle.org/mod/forum/discuss.php?d=466142
4
reference_url https://github.com/advisories/GHSA-pxg4-xjp7-w9c5
reference_id GHSA-pxg4-xjp7-w9c5
reference_type
scores
url https://github.com/advisories/GHSA-pxg4-xjp7-w9c5
5
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:58:41Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26526, GHSA-pxg4-xjp7-w9c5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wsj3-x2v5-y7gc
39
url VCID-x3bb-7vq7-aqaa
vulnerability_id VCID-x3bb-7vq7-aqaa
summary A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3635
reference_id
reference_type
scores
0
value 0.00145
scoring_system epss
scoring_elements 0.34581
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3635
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/dbd723f81c07423d4082d54cd1d90b1b68c44379
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/dbd723f81c07423d4082d54cd1d90b1b68c44379
3
reference_url https://moodle.org/mod/forum/discuss.php?d=467597
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467597
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3635
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3635
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3635
reference_id CVE-2025-3635
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:11Z/
url https://access.redhat.com/security/cve/CVE-2025-3635
6
reference_url https://github.com/advisories/GHSA-88xj-97gf-7wpq
reference_id GHSA-88xj-97gf-7wpq
reference_type
scores
url https://github.com/advisories/GHSA-88xj-97gf-7wpq
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359709
reference_id show_bug.cgi?id=2359709
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:11Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359709
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-57uf-tz1x-akdt
3
vulnerability VCID-82cj-8rk2-kygn
4
vulnerability VCID-cra3-6x3q-vkap
5
vulnerability VCID-dye9-hpdz-myc7
6
vulnerability VCID-ebae-b6eb-s7fr
7
vulnerability VCID-f275-awa8-53gp
8
vulnerability VCID-fsuz-rgpw-8qd4
9
vulnerability VCID-gapa-a9xy-w3be
10
vulnerability VCID-hh6z-2319-83g4
11
vulnerability VCID-kymv-5vap-7qf7
12
vulnerability VCID-nsvy-6gvu-wqe1
13
vulnerability VCID-nw7f-9kxh-dfer
14
vulnerability VCID-pg53-92qn-67f4
15
vulnerability VCID-tr6w-mqxr-vueh
16
vulnerability VCID-wr3n-bk11-a3bj
17
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3635, GHSA-88xj-97gf-7wpq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x3bb-7vq7-aqaa
40
url VCID-x9xg-ujre-3ub9
vulnerability_id VCID-x9xg-ujre-3ub9
summary A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67849
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00694
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67849
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/a3063dcaa44dbe66e60a37cadb33bfadfe4feb03
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a3063dcaa44dbe66e60a37cadb33bfadfe4feb03
3
reference_url https://moodle.org/mod/forum/discuss.php?d=471299
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471299
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67849
reference_id CVE-2025-67849
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://access.redhat.com/security/cve/CVE-2025-67849
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67849
reference_id CVE-2025-67849
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67849
6
reference_url https://github.com/advisories/GHSA-mhf6-pp52-8wqj
reference_id GHSA-mhf6-pp52-8wqj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mhf6-pp52-8wqj
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423835
reference_id show_bug.cgi?id=2423835
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423835
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
1
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
2
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82cj-8rk2-kygn
1
vulnerability VCID-nsvy-6gvu-wqe1
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67849, GHSA-mhf6-pp52-8wqj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x9xg-ujre-3ub9
41
url VCID-xkgj-r2v3-k3gt
vulnerability_id VCID-xkgj-r2v3-k3gt
summary 
Insufficient sanitizing in the TeX notation filter resulted in an 
arbitrary file read risk on sites where pdfTeX is available (such as 
those with TeX Live installed).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26525
reference_id
reference_type
scores
0
value 0.00212
scoring_system epss
scoring_elements 0.43819
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26525
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26525
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26525
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466141
reference_id discuss.php?d=466141
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:59:34Z/
url https://moodle.org/mod/forum/discuss.php?d=466141
4
reference_url https://github.com/advisories/GHSA-4hmr-39vp-xfrr
reference_id GHSA-4hmr-39vp-xfrr
reference_type
scores
url https://github.com/advisories/GHSA-4hmr-39vp-xfrr
5
reference_url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:59:34Z/
url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26525, GHSA-4hmr-39vp-xfrr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xkgj-r2v3-k3gt
42
url VCID-zkc5-3squ-puep
vulnerability_id VCID-zkc5-3squ-puep
summary Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26527
reference_id
reference_type
scores
0
value 0.00365
scoring_system epss
scoring_elements 0.58902
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26527
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26527
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26527
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466143
reference_id discuss.php?d=466143
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:57:30Z/
url https://moodle.org/mod/forum/discuss.php?d=466143
4
reference_url https://github.com/advisories/GHSA-5r85-6h7f-rg3r
reference_id GHSA-5r85-6h7f-rg3r
reference_type
scores
url https://github.com/advisories/GHSA-5r85-6h7f-rg3r
5
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941
reference_id gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:57:30Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3dr4-hds3-ckbr
1
vulnerability VCID-3s11-9e4p-pygy
2
vulnerability VCID-46sh-98bs-ybex
3
vulnerability VCID-57uf-tz1x-akdt
4
vulnerability VCID-67tn-z6kv-vybp
5
vulnerability VCID-7a6m-m4t2-5ydp
6
vulnerability VCID-7zqn-5pyf-pyg9
7
vulnerability VCID-82cj-8rk2-kygn
8
vulnerability VCID-87yg-v5af-mfd4
9
vulnerability VCID-95fs-szzk-c3h5
10
vulnerability VCID-b959-r7ty-3fdj
11
vulnerability VCID-bn3p-ccnj-3ubw
12
vulnerability VCID-c7uy-k6wn-s3f9
13
vulnerability VCID-cra3-6x3q-vkap
14
vulnerability VCID-dye9-hpdz-myc7
15
vulnerability VCID-eaej-5e2e-yfcr
16
vulnerability VCID-ebae-b6eb-s7fr
17
vulnerability VCID-f275-awa8-53gp
18
vulnerability VCID-fsuz-rgpw-8qd4
19
vulnerability VCID-gapa-a9xy-w3be
20
vulnerability VCID-hh6z-2319-83g4
21
vulnerability VCID-kymv-5vap-7qf7
22
vulnerability VCID-n5hx-mc7q-sua6
23
vulnerability VCID-nsvy-6gvu-wqe1
24
vulnerability VCID-nw7f-9kxh-dfer
25
vulnerability VCID-pg53-92qn-67f4
26
vulnerability VCID-pv24-2amy-4yb9
27
vulnerability VCID-s97q-jcmh-ukdh
28
vulnerability VCID-sja2-g5vp-tqev
29
vulnerability VCID-tr6w-mqxr-vueh
30
vulnerability VCID-wr3n-bk11-a3bj
31
vulnerability VCID-x3bb-7vq7-aqaa
32
vulnerability VCID-x9xg-ujre-3ub9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26527, GHSA-5r85-6h7f-rg3r
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zkc5-3squ-puep
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.0-beta