CVE-2025-3644

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 863

Summary

CVE-2025-3644 is a vulnerability affecting the Moodle learning management system. This issue permits users to delete course sections they lack the required authorization to modify, despite the system's intended access restrictions. The flaw could potentially lead to data loss or unintended modifications, posing a significant risk to organizations utilizing Moodle for their educational or training programs. Organizations using Moodle are advised to apply the available patch as soon as possible to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share