CVE-2025-26527

Summary

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.

Affected Software

VendorProductVersion RangeStatus
Moodle Projectmoodle4.5.0 < 4.5.2affected
Moodle Projectmoodle4.4.0 < 4.4.6affected
Moodle Projectmoodle4.3.0 < 4.3.10affected
Moodle Projectmoodle4.1.0 < 4.1.16affected
Moodle Projectmoodle4.2.0 < 4.2.*unknown
Moodle Projectmoodle0 < 4.0.*unknown

Weaknesses

  • CWE-1230: CWE-1230 Exposure of Sensitive Information Through Metadata

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References