CVE-2025-3645

4.3

MEDIUMCVSS v3

Published

April 25, 2025

Affected

6 projects

Assigned by

Severity scale

010

Description

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses.

GitHubMoodle - the world's open source learning platform

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18, >= 4.3.0-beta, < 4.3.12, >= 4.4.0-beta, < 4.4.8, >= 4.5.0-beta, < 4.5.4NVD

Crates.ioMoodle Webservice Client in Rust.

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18NVD

NPM

Model module for node for use with both mongodb and mysql.

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18NVD

Python Package IndexMoodle web services connection library

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18NVD

RubyGemsInteract with Moodle from ruby

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18NVD

GitHubModel module for node for use with both mongodb and mysql.

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4, < 4.1.18NVD