CVE-2025-3642

8.8 highEPSS 1.1%

High (8.8) in moodle moodle. EPSS 1.1% chance of exploitation in the next 30 days.

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2025-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

https://access.redhat.com/security/cve/CVE-2025-3642
https://bugzilla.redhat.com/show_bug.cgi?id=2359738
https://moodle.org/mod/forum/discuss.php?d=467603

Check your stack JSON