CVE-2025-62396

Medium CVSS: 5.3

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

Vendor

Moodle

Product

Moodle

CWE

CWE-548

Yayın Tarihi

2025-10-23 12:15:31

Güncelleme

2025-11-14 19:21:00

Source Identifier

patrick@puiterwijk.org

KEV Date Added

Kategoriler

CWE-548 Moodle MEDIUM Moodle 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-62396 https://bugzilla.redhat.com/show_bug.cgi?id=2404429

Benzer Kayıtlar

High

CVE-2026-26046

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration…

Medium

CVE-2026-26047

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete…

High

CVE-2026-26045

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va…

Medium

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs…

High

CVE-2025-67849

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt…

High

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o…