CVE-2025-3637

Publication date

2025-04-25 14:42:56

Family

fedora

State

PUBLISHED

Description

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the sites URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages.