CVE-2025-67857
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
4.3 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Vulnerability Description
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-201
Source
NVD
Vendor
composer
Product
moodle/moodle
Discussion (0)
Add Comment
No comments yet. Be the first!