ROS-20250828-04

🗓️ 28 Aug 2025 00:00:00Reported by RedosType

Moodle has multiple vulnerabilities: calendar data cleanup XSS, capability and key reuse risks, SQL query protection failures, and access control weaknesses.

Reporter	Title	Published	Views	Family All 145
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of measures to protect the SQL query structure, allows attackers to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the use of a password after its expiration, allows unauthorized access to protected information.	8 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the provision of confidential information to unauthorized individuals, allows a intruder to gain unauthorized access to protected information.	8 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual training environment Moodle, related to the improper elimination of input data during the generation of web pages, allows attackers to perform cross-site scripting attacks.	8 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-26531	24 Feb 202520:22	–	circl
Circl	CVE-2025-26532	24 Feb 202520:22	–	circl
Circl	CVE-2025-26533	24 Feb 202520:22	–	circl
CNNVD	Moodle Security Breach	18 Jun 202400:00	–	cnnvd

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	moodle	4.5.4-1	UNKNOWN

28 Aug 2025 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.18.1 - 9.8

EPSS0.00435

SSVC