MEDIUM
Moodle: hidden grades shown to users without permission on some grade reports
Published Apr 25, 2025
5.3
MEDIUMCVSS 3.1
EPSS 0.31%
Description
A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (1)
References (7)
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945
- https://access.redhat.com/security/cve/CVE-2025-32045 vdb-entryx_refsource_REDHATThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2356835 issue-trackingx_refsource_REDHATIssue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12529 Advisory
- https://github.com/advisories/GHSA-8m7c-hm88-2p97 Advisory
- https://moodle.org/mod/forum/discuss.php?d=467086
- https://nvd.nist.gov/vuln/detail/CVE-2025-32045
| Link | Providers | Tags |
|---|---|---|
| http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945 | ||
| https://access.redhat.com/security/cve/CVE-2025-32045 | vdb-entryx_refsource_REDHATThird Party Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2356835 | issue-trackingx_refsource_REDHATIssue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12529 | Advisory | |
| https://github.com/advisories/GHSA-8m7c-hm88-2p97 | Advisory | |
| https://moodle.org/mod/forum/discuss.php?d=467086 | ||
| https://nvd.nist.gov/vuln/detail/CVE-2025-32045 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner fedora
Published Apr 25, 2025
Updated Apr 25, 2025
Reserved Apr 2, 2025
Link CVE-2025-32045
CISA Vulnrichment
Updated Apr 25, 2025
Red Hat
No data
GitHub
Link GHSA-8M7C-HM88-2P97