Description

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.

Remediation

References

CVE-2025-3638

Related Vulnerabilities

Oracle Database Server CVE-2014-6560 Vulnerability (CVE-2014-6560)

WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cloaking (2.2.9)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4306)

WordPress Denial of Service Vulnerability (0.70 - 3.6.1)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2947)

Severity

High

Classification

CVE-2025-3638 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities