CVE-2025-26526

Published Feb 24, 2025

Last updated 17 days ago

Overview

Description
Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.
Source
patrick@puiterwijk.org
NVD status
Analyzed
Products
moodle

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.5
Impact score
2.5
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity
MEDIUM

Weaknesses

patrick@puiterwijk.org
CWE-863

Social media

Hype score
Not currently trending

Configurations