CVE-2025-32044

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 200

Summary

CVE-2025-32044 is a cybersecurity vulnerability affecting Moodle, an educational platform. Maliciously crafted API calls can expose sensitive user data, such as names, contact information, and hashed passwords, to unauthenticated users on vulnerable sites. This issue occurs when PHP is not configured with zend.exception_ignore_args = 1 in the php.ini file. System administrators must patch or upgrade their Moodle instances to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share