CVE-2025-3647

MEDIUM4.3EPSS 0.08%

Moodle: idor when accessing the cohorts report

發布日:2025/4/25修改日:2026/1/26

描述

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve.

受影響套件(2)

Bitnami/moodlefrom 0, < 4.1.18, >= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4
Packagist/moodle/moodlefrom 0, < 4.1.18

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

參考連結(6)