CVE-2025-67847 — Moodle: moodle: remote code execution via insufficient restore input validation

CVE-2025-67847

Moodle: moodle: remote code execution via insufficient restore input validation PUBLISHED

Description (CNA)

A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 5.1.0 before 5.1.1; affected 5.0.0 before 5.0.4; affected 4.5.0 before 4.5.8; affected 4.4.0 before 4.4.12; affected 4.1.0 before 4.1.22; affected 0 before 4.1.0

CWE

CWE-94

References

https://access.redhat.com/security/cve/CVE-2025-67847

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.