Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.

Published: Apr 25, 2025
Updated: Dec 15, 2025
CVE: CVE-2025-3638
GHSA: GHSA-m8qh-hx4c-h9hr
Severity: Low
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

CWE-352

Affected Software
References

Software	From	Fixed in
moodle / moodle	-	4.1.18
moodle / moodle	4.3.0-beta	4.3.12
moodle / moodle	4.4.0-beta	4.4.8
moodle / moodle	4.5.0-beta	4.5.4
moodle / moodle	4.3.0	4.3.12
moodle / moodle	4.4.0	4.4.8
moodle / moodle	4.5.0	4.5.4

https://access.redhat.com/security/cve/CVE-2025-3638
https://bugzilla.redhat.com/show_bug.cgi?id=2359732
https://github.com/moodle/moodle/commit/91e6ad43ed2522f9c1c4094e565b5a7e5b348728
https://moodle.org/mod/forum/discuss.php?d=467600

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo