Vulnerability DatabaseCVE-2025-67857
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2025-67857
Published:February 03, 2026
Updated:May 16, 2026
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.
Affected Packages
https://github.com/moodle/moodle.git (GITHUB):
Affected version(s) >=v4.1.0 <v4.1.22
Fix Suggestion:
Update to version v4.1.22
https://github.com/moodle/moodle.git (GITHUB):
Affected version(s) >=v5.0.0 <v5.0.4
Fix Suggestion:
Update to version v5.0.4
https://github.com/moodle/moodle.git (GITHUB):
Affected version(s) >=v4.5.0 <v4.5.8
Fix Suggestion:
Update to version v4.5.8
https://github.com/moodle/moodle.git (GITHUB):
Affected version(s) >=v4.4.0 <v4.4.12
Fix Suggestion:
Update to version v4.4.12
https://github.com/moodle/moodle.git (GITHUB):
Affected version(s) =v5.1.0 <v5.1.1
Fix Suggestion:
Update to version v5.1.1
moodle/moodle (PHP):
Affected version(s) >=v4.4.0 <v4.4.12
Fix Suggestion:
Update to version v4.4.12
moodle/moodle (PHP):
Affected version(s) >=v5.0.0-beta <v5.0.4
Fix Suggestion:
Update to version v5.0.4
moodle/moodle (PHP):
Affected version(s) >=v4.5.0 <v4.5.8
Fix Suggestion:
Update to version v4.5.8
moodle/moodle (PHP):
Affected version(s) >=v5.1.0-beta <v5.1.1
Fix Suggestion:
Update to version v5.1.1
moodle/moodle (PHP):
Affected version(s) >=v5.0.0 <v5.0.4
Fix Suggestion:
Update to version v5.0.4
moodle/moodle (PHP):
Affected version(s) >=v4.4.0-beta <v4.4.12
Fix Suggestion:
Update to version v4.4.12
moodle/moodle (PHP):
Affected version(s) >=v1.0.0 <v4.1.22
Fix Suggestion:
Update to version v4.1.22
moodle/moodle (PHP):
Affected version(s) >=v4.5.0-beta <v4.5.8
Fix Suggestion:
Update to version v4.5.8
moodle/moodle (PHP):
Affected version(s) =v5.1.0 <v5.1.1
Fix Suggestion:
Update to version v5.1.1
Related Resources (7)
https://github.com/moodle/moodle
https://nvd.nist.gov/vuln/detail/CVE-2025-67857
https://github.com/moodle/moodle/commit/c6cb8d971257c04a12a2c5d8510a89cb906f46f0
https://github.com/moodle/moodle/commit/ac30e7e19357f696979b7ffd760a7131b6ad88f6
https://moodle.org/mod/forum/discuss.php?d=471307
https://bugzilla.redhat.com/show_bug.cgi?id=2423868
https://access.redhat.com/security/cve/CVE-2025-67857
Do you need more information?
Contact Us
CVSS v4
Base Score:
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE
Weakness Type (CWE)
Insertion of Sensitive Information Into Sent Data
CWE-201
EPSS
Base Score:
0.02