CVE-2025-32045

MEDIUM5.3EPSS 0.15%

Moodle shows hidden grades to users without permission on some grade reports

發布日:2025/4/25修改日:2026/1/26

也稱為:GHSA-8m7c-hm88-2p97BIT-moodle-2025-32045

描述

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.

受影響套件(2)

Bitnami/moodlefrom 0, < 4.1.17, >= 4.3.0, < 4.3.11, >= 4.4.0, < 4.4.7, >= 4.5.0, < 4.5.3
Packagist/moodle/moodlefrom 0, < 4.1.17

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

參考連結(6)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-32045
PATCHhttps://github.com/moodle/moodle
WEBhttp://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945
WEBhttps://access.redhat.com/security/cve/CVE-2025-32045
WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=2356835
WEBhttps://moodle.org/mod/forum/discuss.php?d=467086