Moodle up to 4.1.17/4.3.11/4.4.7/4.5.3 Course Section authorization

Summaryinfo

A vulnerability classified as problematic has been found in Moodle up to 4.1.17/4.3.11/4.4.7/4.5.3. This impacts an unknown function of the component Course Section Handler. Performing a manipulation results in authorization. This vulnerability is cataloged as CVE-2025-3644. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Moodle up to 4.1.17/4.3.11/4.4.7/4.5.3. It has been classified as problematic. This affects some unknown processing of the component Course Section Handler. The manipulation with an unknown input leads to a authorization vulnerability. CWE is classifying the issue as CWE-863. The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. This is going to have an impact on integrity, and availability. The summary by CVE is:

A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not have permission to modify.

The advisory is shared at access.redhat.com. This vulnerability is uniquely identified as CVE-2025-3644 since 04/15/2025. The exploitability is told to be easy. It is possible to initiate the attack remotely. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 06/24/2025).

Upgrading to version 4.1.18, 4.3.12, 4.4.8 or 4.5.4 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Learning Management Software

Name

• Moodle

Version

• 4.1.0
• 4.1.1
• 4.1.2
• 4.1.3
• 4.1.4
• 4.1.5
• 4.1.6
• 4.1.7
• 4.1.8
• 4.1.9
• 4.1.10
• 4.1.11
• 4.1.12
• 4.1.13
• 4.1.14
• 4.1.15
• 4.1.16
• 4.1.17
• 4.3.0
• 4.3.1
• 4.3.2
• 4.3.3
• 4.3.4
• 4.3.5
• 4.3.6
• 4.3.7
• 4.3.8
• 4.3.9
• 4.3.10
• 4.3.11
• 4.4.0
• 4.4.1
• 4.4.2
• 4.4.3
• 4.4.4
• 4.4.5
• 4.4.6
• 4.4.7
• 4.5.0
• 4.5.1
• 4.5.2
• 4.5.3

License

• open-source

Website

• Product: https://moodle.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion