Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2025-3637 — LOW severity vulnerability | Release Alert

CVE-2025-3637

3.1

LOWCVSS v3

Published

April 25, 2025

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages.

GitHubMoodle - the world's open source learning platform

>= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.3.12, >= 4.3.0-beta, < 4.3.12, >= 4.4.0-beta, < 4.4.8, >= 4.5.0-beta, < 4.5.4NVD

Crates.ioMoodle Webservice Client in Rust.

>= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.3.12NVD

More on this CVE

NVD↗GitHub Advisory↗

NPM

Model module for node for use with both mongodb and mysql.

>= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.3.12NVD

Python Package IndexMoodle web services connection library

>= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.3.12NVD

RubyGemsInteract with Moodle from ruby

>= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.3.12NVD

GitHubModel module for node for use with both mongodb and mysql.

>= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.3.12NVD