Moodle has an authorization logic flaw
A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to privilege escalation or unauthorized access to certain features.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-67856US | critical9.8OT erhöht | — | ||
A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper v… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/CVE-2025-67856WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2423864WEB
- https://github.com/moodle/moodlePACKAGE
- https://github.com/moodle/moodle/commit/0d48779e61bcacbabbcb82858a037b567351fce0WEB
- https://moodle.org/mod/forum/discuss.php?d=471306WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-67856ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan