Lucene search
+L

15 matches found

osv_bit
osv_bit
•added 2026/02/12 8:51 a.m.•26 views

BIT-MOODLE-2025-67856 Moodle: moodle: privilege escalation via incomplete role checks in badge awarding

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.7AI score0.00306EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/02/04 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-67856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be...

9.8CVSS5.7AI score0.00306EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/02/03 12:30 p.m.•24 views

Moodle has an authorization logic flaw

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.7AI score0.00306EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/02/03 12:30 p.m.•20 views

GHSA-HCM6-Q6PC-XFHM Moodle has an authorization logic flaw

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.7AI score0.00306EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/02/03 11:48 a.m.•7 views

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization via incomplete role checks in the badge awarding. An attacker can gain unauthorized access to badges and potentially escalate privileges by exploiting insufficient verificati...

9.8CVSS5.8AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/03 11:15 a.m.•20 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS0.00306EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/02/03 11:15 a.m.•17 views

UBUNTU-CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.7AI score0.00306EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/02/03 11:15 a.m.•11 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.7AI score0.00306EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/03 10:52 a.m.•4 views

CVE-2025-67856 Moodle: moodle: privilege escalation via incomplete role checks in badge awarding

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.7AI score0.00306EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/03 10:52 a.m.•70 views

CVE-2025-67856

The CVE-2025-67856 issue affects Moodle and stems from an authorization logic flaw: incomplete role checks during the badge awarding process allow badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading ...

9.8CVSS5.7AI score0.00306EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/02/03 10:52 a.m.•18 views

EUVD-2025-206750

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.7AI score0.00306EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/03 10:52 a.m.•16 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.7AI score0.00306EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/02/03 10:52 a.m.•17 views

CVE-2025-67856 Moodle: moodle: privilege escalation via incomplete role checks in badge awarding

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.4CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•4 views

CVE-2025-67856: Incorrect Authorization

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

9.8CVSS5.7AI score0.00306EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 1:44 p.m.•12 views

CVE-2025-67856

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to...

5.7AI score0.00306EPSS
SaveExploits0References2
Rows per page
Query Builder