PT-2025-26658 · Moodle · Moodle Lms Jmol Plugin

Dionach Admin · Published 2025-06-24 · Updated 2025-11-19 · CVE-2025-34031

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Moodle LMS Jmol plugin versions 6.1 and prior

Description: A path traversal vulnerability exists in the Moodle LMS Jmol plugin via the query parameter in jsmol.php. The script directly passes user input to the file get contents() function without proper validation, allowing attackers to read arbitrary files from the server's filesystem by crafting a malicious query value. This issue can be exploited without authentication and may expose sensitive configuration data, including database credentials.

Recommendations: For Moodle LMS Jmol plugin versions 6.1 and prior, as a temporary workaround, consider disabling the file get contents() function or restricting access to the jsmol.php file until a patch is available. Avoid using the query parameter in the jsmol.php file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Information Disclosure

RCE

Weakness Enumeration

CWE-22

CWE-200

CWE-20

Related Identifiers

CVE-2025-34031

Affected Products

Moodle Lms Jmol Plugin

References · 14

• 🔥 https://dionach.com/moodle-jmol-plugin-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/46881 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34031 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34031 · Vendor Advisory
• https://t.me/cvenotify/126624 · Telegram Post
• https://t.me/cveNotify/143432 · Telegram Post
• https://twitter.com/transilienceai/status/1937373709192561106 · Twitter Post
• https://t.me/latest_high_impact_cve/2792 · Telegram Post
• https://vulncheck.com/advisories/moodle-lms-jmol-plugin-path-traversal · Note
• https://twitter.com/pdnuclei_bot/status/1938235810924392885 · Twitter Post
• https://vulncheck.com/advisories/moodle-lms-jmol-jsmol-plugin-path-traversal · Note
• https://twitter.com/VulmonFeeds/status/1937347836024091023 · Twitter Post
• https://twitter.com/CVEnew/status/1937344578828280298 · Twitter Post
• https://t.me/cvenotify/128259 · Telegram Post