Nixpkgs security tracker

Untriaged

Permalink CVE-2025-32045

5.3 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): NONE
Availability impact (A): NONE

created 6 months, 3 weeks ago

Moodle: hidden grades shown to users without permission on some grade reports

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.

References

https://access.redhat.com/security/cve/CVE-2025-32045 x_refsource_REDHATvdb-entry
RHBZ#2356835 issue-trackingx_refsource_REDHAT

Affected products

moodle

==4.4.7
==4.5.3
==4.3.11
==4.1.17

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable -
- nixpkgs-unstable 5.0.2

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable -
- nixpkgs-unstable 2.3.13

Package maintainers