Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/03 10:52 a.m.9 views

CVE-2025-67851 Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export

A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to...

6.1CVSS6.1AI score0.00251EPSS
SaveExploits0References6
Rows per page
Query Builder