CVE-2025-32045

Friday, April 25, 2025

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.

Affected Software

Vendor	Product	Version Range	Status
		`4.5.3`	affected
		`4.4.7`	affected
		`4.3.11`	affected
		`4.1.17`	affected

Weaknesses

CWE-862: Missing Authorization

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: yes
- Technical Impact: partial

References

https://access.redhat.com/security/cve/CVE-2025-32045
https://bugzilla.redhat.com/show_bug.cgi?id=2356835

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.

←Previous
Next→