PT-2025-17919 · Moodle+2 · Moodle+2

James E. Calder · Publicado 2025-04-22 · Atualizado 2026-01-26 · CVE-2025-3644

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A flaw was found in the software, where additional checks were required to prevent users from deleting course sections they did not have permission to modify.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

ALT-PU-2025-6924

ALT-PU-2025-7344

BDU:2025-05099

BIT-MOODLE-2025-3644

CVE-2025-3644

GHSA-CPM7-MV33-JWF8

Produtos afetados

Alt Linux

Moodle

Red Os

Referências · 18

• https://github.com/moodle/moodle · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2359745 · Nota
• https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-83994&type=commits · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-3644 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-cpm7-mv33-jwf8 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1915780612570452245 · Publicação no Twitter
• https://t.me/cvetracker/22379 · Publicação no Telegram
• https://t.me/cvedetector/23770 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2025-3644 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2025-3644 · Nota
• https://moodle.org/mod/forum/discuss.php?d=467605 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-3644 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-3644 · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2025-3644 · Nota
• https://cve.org/CVERecord?id=CVE-2025-3644 · Nota de Segurança