CVE-2025-3638

Summary

CVE-2025-3638 is a vulnerability affecting Moodle, an open-source learning management system. The Brickfield tool in Moodle contains a flaw in its analysis request action. This issue fails to incorporate the necessary token, therefore, posing a Cross-site request forgery (CSRF) risk. An attacker could potentially exploit this vulnerability to perform unauthorized actions on behalf of a user, who has previously accessed the Brickfield tool, by tricking them into making a malicious request. It is essential to update Moodle to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.