CVE-2025-3636 MEDIUM

CVE-2025-3636: Moodle: idor in moodle rss block allows unauthorized access to rss feeds

Weakness CWE-639 · IDOR
Published April 25, 2025
Last update April 25, 2025
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks.

Key dates

02Disclosure timeline

April 25, 2025 CVE published
April 25, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-9099 Keycloak: group-admin escalation to realm-admin CVE-2026-48599 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding CVE-2026-48872 WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability CVE-2026-5135 Foreman: foreman: unauthorized modification of host configurations via broken access control CVE-2026-13549 CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization