- Description
- A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.
- Source
- patrick@puiterwijk.org
- NVD status
- Analyzed
- Products
- moodle
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- patrick@puiterwijk.org
- CWE-94
- Hype score
- Not currently trending
CVE-2025-67847 (CVSS:8.8, HIGH) is Awaiting Analysis. A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbi..https://t.co/aIKPortkE7 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
@cracbot
28 Jan 2026
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-67847: Class Is Cancelled: RCE in Moodle's Restore Interface (CVE-2025-67847) A critical Remote Code Execution vulnerability in Moodle's core backup/restore functionality allows authenticated users (like Teachers) to compromise the entire ser... https://t.co/XWQ0SBlCVV
@_cvereports
24 Jan 2026
72 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-67847 Remote Code Execution in Moodle via Restore Interface Vulnerability https://t.co/EX3hnaoyHk Vulnerability Notification: https://t.co/xhLrNnfyrO
@VulmonFeeds
23 Jan 2026
3 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-67847 A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient valida… https://t.co/DEaY89elK3
@CVEnew
23 Jan 2026
88 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A2DF3FD1-3A53-41D9-890B-F6DE973AB09C",
"versionEndExcluding": "4.1.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"matchCriteriaId": "73BDD52B-F279-4521-97B3-BCF12CB07384",
"versionEndExcluding": "4.4.12",
"versionStartIncluding": "4.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C0CC5CF8-4808-41A5-B8A1-B0D6C575E5DC",
"versionEndExcluding": "4.5.8",
"versionStartIncluding": "4.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"matchCriteriaId": "06F81442-AEEB-483D-90A9-93DDBA5B95D6",
"versionEndExcluding": "5.0.4",
"versionStartIncluding": "5.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moodle:moodle:5.1.0:-:*:*:*:*:*:*",
"matchCriteriaId": "567FEE12-0E75-4F0C-B22E-E76990C80E1B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]