← CVE Intelligence

CVE-2025-3644

Moodle: ajax section delete does not respect course_can_delete_section() PUBLISHED

Description (CNA)

A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not have permission to modify.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 4.5.0 before 4.5.4; affected 4.4.0 before 4.4.8; affected 4.3.0 before 4.3.12; affected 4.1.0 before 4.1.18

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.