CVE-2025-3645

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 863

Summary

CVE-2025-3645 is a vulnerability affecting the Moodle learning platform. The issue stems from inadequate capability checks within a messaging web service, enabling unauthorized users to access other users' names and online statuses. This breach of privacy could potentially lead to social engineering attacks or unintended information disclosure. Users are advised to upgrade to the latest Moodle version to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share