← Database

CVE-2025-3638

HIGH CVSS: 8.8 Published: 2025-04-25 Modified: 2026-06-17

Description

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.

Affected Platforms

Moodle Moodle

Weakness Type

CWE-352

References