Moodle Incorrect Authorization Vulnerability - CVE-2025-3645 - Vulnerability Database

Moodle Incorrect Authorization Vulnerability - CVE-2025-3645

Medium

Reference: CVE-2025-3645

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-3645

Title: Moodle Incorrect Authorization Vulnerability

Overview:

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users39 names and online statuses.