CVE-2025-3643

MEDIUM5.4EPSS 0.13%

Moodle has reflected Cross-site Scripting risk in policy tool

發布日:2025/4/25修改日:2026/1/26

也稱為:GHSA-hxgg-4qww-85phBIT-moodle-2025-3643

描述

A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk.

受影響套件(2)

Bitnami/moodlefrom 0, < 4.1.18, >= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4
Packagist/moodle/moodlefrom 0, < 4.1.18

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM5.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

參考連結(6)