CVE-2025-49515 in Moodle

Prediction

by VulDB Data Team • 07/17/2025

A security vulnerability has been detected in Moodle. Affected is an unknown function of the component Course Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. It is suggested to upgrade the affected component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 06/06/2025
• Moderation: accepted
• Entry: VDB-316734
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Education, Police

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-49515
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-49515
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-49515/