Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-3647


A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve.


Published

2025-04-25T15:15:38.550

Last Modified

2025-06-24T15:59:32.860

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-863

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 4.1.18 Yes
Application moodle moodle < 4.3.12 Yes
Application moodle moodle < 4.4.8 Yes
Application moodle moodle < 4.5.4 Yes

References