CVE-2025-3636
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 639
Summary
CVE-2025-3636 is a vulnerability affecting the Moodle learning management system. This issue permits unauthorized users to gain access to RSS feeds, bypassing the necessary capability checks. This flaw poses a risk to the confidentiality of information, as unintended users can view data that is not intended for their access. Organizations using Moodle are advised to apply the necessary patches to mitigate this vulnerability and prevent unauthorized access to sensitive data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.