Lucene search
K

14 matches found

OSV
OSV
added 2026/02/12 8:51 a.m.5 views

BIT-MOODLE-2025-67856 Moodle: moodle: privilege escalation via incomplete role checks in badge awarding

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.4AI score0.00022EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-67856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be...

9.8CVSS5.4AI score0.00022EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/02/03 12:30 p.m.6 views

Moodle has an authorization logic flaw

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.3AI score0.00022EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2026/02/03 12:30 p.m.4 views

GHSA-HCM6-Q6PC-XFHM Moodle has an authorization logic flaw

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.4AI score0.00022EPSS
Exploits0References6
Snyk
Snyk
added 2026/02/03 11:48 a.m.2 views

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization via incomplete role checks in the badge awarding. An attacker can gain unauthorized access to badges and potentially escalate privileges by exploiting insufficient verificati...

9.8CVSS5.5AI score0.00022EPSS
Exploits0References2
OSV
OSV
added 2026/02/03 11:15 a.m.6 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.4AI score0.00022EPSS
Exploits0References2
NVD
NVD
added 2026/02/03 11:15 a.m.3 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS0.00022EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/02/03 11:15 a.m.3 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.8AI score0.00022EPSS
Exploits0References3
OSV
OSV
added 2026/02/03 11:15 a.m.1 views

UBUNTU-CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.7AI score0.00022EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/03 10:52 a.m.5 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.3AI score0.00022EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/03 10:52 a.m.1 views

CVE-2025-67856 Moodle: moodle: privilege escalation via incomplete role checks in badge awarding

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.3AI score0.00022EPSS
Exploits0References2
CVE
CVE
added 2026/02/03 10:52 a.m.23 views

CVE-2025-67856

CVE-2025-67856 concerns Moodle. The vulnerability stems from an authorization logic flaw caused by incomplete role checks during the badge awarding process, which could allow unauthorized users to obtain badges they are not entitled to, potentially enabling privilege escalation or access to restr...

9.8CVSS5.3AI score0.00022EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/02/03 10:52 a.m.4 views

EUVD-2025-206750

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.3AI score0.00022EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/19 1:44 p.m.2 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

6.6AI score0.00022EPSS
Exploits0References2
Rows per page
Query Builder