CVE-2025-32045

Summary

CVE-2025-32045 is a newly discovered vulnerability affecting the Moodle learning management system. This issue stems from insufficient capability checks in certain grade reports, granting unauthorized access to hidden grades for users lacking the necessary permissions. This security lapse can potentially lead to sensitive data exposure, making it crucial for Moodle users to apply the available patch without delay. Organizations relying on Moodle for their educational or training programs should prioritize updating their systems promptly to mitigate this risk and maintain the confidentiality of their students' academic records.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.