BIT-moodle-2025-67857

vendorUSosv

Moodle: moodle: data exposure of user identifiers in urls

Advisory ansehen veröffentlicht 2026-02-12Lizenz: per source

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-67857US	medium5.3	0.36% (30th)	—	2026-02-03
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see inte…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://access.redhat.com/security/cve/CVE-2025-67857ADVISORY
https://bugzilla.redhat.com/show_bug.cgi?id=2423868ADVISORY
https://moodle.org/mod/forum/discuss.php?d=471307ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-67857WEB

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan