CVE-2025-3638

Published Apr 25, 2025

Last updated 10 days ago

Overview

Description
A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.
Source
patrick@puiterwijk.org
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

patrick@puiterwijk.org
CWE-352

Social media

Hype score
Not currently trending

Configurations