Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-67847
8.8
HIGHCVSS v3
Severity scale
010
Description
A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform< 4.1.22, >= 4.4.0, < 4.4.12, >= 4.5.0, < 4.5.8, >= 5.0.0, < 5.0.4, = 5.1.0, >= 5.1.0-beta, < 5.1.1, >= 5.0.0-beta, < 5.0.4, >= 4.5.0-beta, < 4.5.8, >= 4.2.0-beta, < 4.4.12NVD
moodle
Crates.ioMoodle Webservice Client in Rust.
Crates.ioMoodle Webservice Client in Rust.< 4.1.22, >= 4.4.0, < 4.4.12, >= 4.5.0, < 4.5.8, >= 5.0.0, < 5.0.4, = 5.1.0NVD
NPM
RubyGems