Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2025-32044 - Vulnerability Database
Moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2025-32044

High
Reference: CVE-2025-32044
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-32044
Title: Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

A flaw has been identified in Moodle where on certain sites unauthenticated users could retrieve sensitive user dataincluding names contact information and hashed passwordsvia stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args 1 in the php.ini file are not affected by this vulnerability.