CVE-2025-3640 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and pr…
Medium CVSS: 4.3

CVE-2025-3640

A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access.
Vendor
Moodle
Product
Moodle
CWE
CWE-639
Yayın Tarihi
2025-04-25 15:15:37
Güncelleme
2025-06-24 16:09:36
Source Identifier
patrick@puiterwijk.org
KEV Date Added
-

Kategoriler

CWE-639 Moodle MEDIUM Moodle 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-3640 https://bugzilla.redhat.com/show_bug.cgi?id=2359734 https://moodle.org/mod/forum/discuss.php?d=467601