CVEvulnerability
CVE-2025-3642
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-94
Description
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.
Affected configurations
• moodle moodle (< 4.1.18)
• moodle moodle (>= 4.3.0 < 4.3.12)
• moodle moodle (>= 4.4.0 < 4.4.8)
• moodle moodle (>= 4.5.0 < 4.5.4)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://access.redhat.com/security/cve/CVE-2025-3642 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2359738 Issue Tracking
- https://moodle.org/mod/forum/discuss.php?d=467603 Vendor Advisory