FICHE CVE

CVE-2025-3637

Publiée le 2025-04-25 · Dernière modification le 2026-06-17

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages.

CVSS 3.13.1 FAIBLE

Type de faiblesse

CWE-598