Lucene search
K

29 matches found

OSV
OSV
added 2026/02/12 8:51 a.m.6 views

BIT-MOODLE-2025-67857 Moodle: moodle: data exposure of user identifiers in urls

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

5.3CVSS5.4AI score0.00342EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-67857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized...

5.3CVSS5.4AI score0.00342EPSS
Exploits0References2
OSV
OSV
added 2026/02/03 12:30 p.m.4 views

GHSA-8JRV-WX83-W3XJ Moodle Inserts Sensitive Information Into Sent Data

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

4.3CVSS5.3AI score0.00342EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/02/03 12:30 p.m.5 views

Moodle Inserts Sensitive Information Into Sent Data

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

5.3CVSS5.3AI score0.00342EPSS
Exploits0References7Affected Software1
Snyk
Snyk
added 2026/02/03 11:48 a.m.2 views

Insertion of Sensitive Information Into Sent Data

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the urls during anonymous assignment submissions. An attacker can access internal user identifiers by viewing exposed URLs, which may compromise...

5.3CVSS5.5AI score0.00342EPSS
Exploits0References2
NVD
NVD
added 2026/02/03 11:15 a.m.6 views

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

5.3CVSS0.00342EPSS
Exploits0References3
OSV
OSV
added 2026/02/03 11:15 a.m.4 views

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

5.3CVSS5.4AI score0.00342EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/02/03 11:15 a.m.1 views

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

5.3CVSS5.8AI score0.00342EPSS
Exploits0References4
OSV
OSV
added 2026/02/03 11:15 a.m.2 views

UBUNTU-CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

5.3CVSS5.7AI score0.00342EPSS
Exploits0References5
CVE
CVE
added 2026/02/03 10:52 a.m.16 views

CVE-2025-67857

CVE-2025-67857 affects Moodle: during anonymous assignment submissions, internal user IDs are exposed in URLs, enabling information disclosure. CVSS v3.1: AV N, AC L, PR N, UI R, S U, C L, I N, A N (base 4.3, MEDIUM). Connected sources note no vendor patch is available yet; several advisories lis...

5.3CVSS5.3AI score0.00342EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/02/03 10:52 a.m.23 views

CVE-2025-67857 Moodle: moodle: data exposure of user identifiers in urls

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

4.3CVSS0.00342EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/03 10:52 a.m.4 views

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

4.3CVSS5.3AI score0.00342EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/03 10:52 a.m.1 views

CVE-2025-67857 Moodle: moodle: data exposure of user identifiers in urls

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

4.3CVSS5.3AI score0.00342EPSS
Exploits0References3
EUVD
EUVD
added 2026/02/03 10:52 a.m.4 views

EUVD-2025-206751

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

4.3CVSS5.3AI score0.00342EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.4 views

PT-2026-5965

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw exists in Moodle where user identifiers are exposed in URLs during anonymous assignment submissions. This exposure compromises the intended anonymity and could lead to information...

5.3CVSS5.4AI score0.00342EPSS
Exploits0References11
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.4 views

Moodle 安全漏洞

Moodle is an open-source e-learning software platform developed by Moodle Foundation. It is also known as a course management system, learning management system, or virtual learning environment. Moodle has security vulnerabilities. These vulnerabilities stem from the accidental exposure of user...

5.3CVSS5.8AI score0.00342EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/19 1:58 p.m.3 views

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

6.3AI score0.00342EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-12527

Malicious code in bioql PyPI...

4.3CVSS4.8AI score0.00271EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-3628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities. CVE-2025-3628 Note that...

4.3CVSS5.1AI score0.00271EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/04/25 3:31 p.m.14 views

Moodle reveals student identities through assignment submissions search on anonymous submissions

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

4.3CVSS7AI score0.00271EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder