CVE-2025-3637

Katalog CVE

CVSS 3.1 · Low EPSS 0,36%

Kerentanan Use of HTTP Request With Sensitive Query String pada moodle. Skor CVSS 3.1 3.1 (Low) menurut puiterwijk.org.

Deskripsi (NVD)

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages.

Rincian

Terbit di NVD

25 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.1 (Low), sumber puiterwijk.org
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-598: Use of HTTP Request With Sensitive Query String

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 28,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-65356 patch
• https://access.redhat.com/security/cve/CVE-2025-3637 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2359727 issue tracking