PT-2025-17917 · Moodle+2 · Moodle+2

Cli-Ish + 1 · Published 2025-04-22 · Updated 2026-01-26 · CVE-2025-3642

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A flaw was found in Moodle, specifically a remote code execution risk in the Moodle LMS EQUELLA repository. This repository is only available to teachers and managers by default on sites where it is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

ALT-PU-2025-6924

ALT-PU-2025-7344

BDU:2025-05101

BIT-MOODLE-2025-3642

CVE-2025-3642

GHSA-M367-445C-2XQR

Affected Products

Alt Linux

Moodle

Red Os

References · 21

• https://moodle.org/mod/forum/discuss.php?d=467603 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2025-3642 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-3642 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05101 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-3642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-3642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-3642 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-3642 · Security Note
• https://osv.dev/vulnerability/GHSA-m367-445c-2xqr · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599da · Note
• https://t.me/cvetracker/22377 · Telegram Post
• https://access.redhat.com/security/cve/CVE-2025-3642 · Note
• https://twitter.com/CVEnew/status/1915780614625624132 · Twitter Post