CVE-2025-3645
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 863
Summary
CVE-2025-3645 is a vulnerability affecting the Moodle learning platform. The issue stems from inadequate capability checks within a messaging web service, enabling unauthorized users to access other users' names and online statuses. This breach of privacy could potentially lead to social engineering attacks or unintended information disclosure. Users are advised to upgrade to the latest Moodle version to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Moodle
Affected Vendors
- Moodle