Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-3642US | — | — | ||
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/CVE-2025-3642WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2359738WEB
- https://github.com/moodle/moodlePACKAGE
- https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599daWEB
- https://moodle.org/mod/forum/discuss.php?d=467603WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-3642ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan