Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-3641US | — | — | ||
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/CVE-2025-3641WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2359735WEB
- https://github.com/moodle/moodlePACKAGE
- https://github.com/moodle/moodle/commit/27b839b5c60389623ca8e3496792b43a44527cd6WEB
- https://moodle.org/mod/forum/discuss.php?d=467602WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-3641ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan