CVEvulnerability
CVE-2025-3641
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-94
Description
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.
Affected configurations
• moodle moodle (< 4.1.18)
• moodle moodle (>= 4.3.0 < 4.3.12)
• moodle moodle (>= 4.4.0 < 4.4.8)
• moodle moodle (>= 4.5.0 < 4.5.4)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://access.redhat.com/security/cve/CVE-2025-3641 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2359735 Issue Tracking
- https://moodle.org/mod/forum/discuss.php?d=467602 Vendor Advisory