Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-3635
Description
A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18, >= 4.3.0-beta, < 4.3.12, >= 4.4.0-beta, < 4.4.8, >= 4.5.0-beta, < 4.5.4NVD
moodle
Crates.ioMoodle Webservice Client in Rust.
Crates.ioMoodle Webservice Client in Rust.>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18NVD
NPM
RubyGems