PT-2025-14481 · Moodle+2 · Moodle+2

Ilya Tregubov · Published 2025-03-26 · Updated 2026-01-26 · CVE-2025-32045

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A flaw has been identified where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

ALT-PU-2025-6924

ALT-PU-2025-7344

BDU:2025-06112

BIT-MOODLE-2025-32045

CVE-2025-32045

GHSA-8M7C-HM88-2P97

Affected Products

Alt Linux

Moodle

Red Os

References · 17

• https://ubuntu.com/security/CVE-2025-32045 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2025-32045 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-32045 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-32045 · Security Note
• https://bdu.fstec.ru/vul/2025-06112 · Security Note
• https://osv.dev/vulnerability/GHSA-8m7c-hm88-2p97 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32045 · Security Note
• https://osv.dev/vulnerability/CVE-2025-32045 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://twitter.com/WolfgangSesin/status/1907397100083564974 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-moodle-cve-2025-32045-cve-2025-3635-cve-2025-3634-cve-2025-3627 · Note
• https://access.redhat.com/security/cve/CVE-2025-32045 · Note
• https://twitter.com/CVEnew/status/1915780607654678686 · Twitter Post
• https://moodle.org/mod/forum/discuss.php?d=467086 · Note