Description

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.

Remediation

References

CVE-2025-3641

Related Vulnerabilities

ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7366)

WordPress Plugin AJAX Comment Page Cross-Site Scripting (3.25)

Drupal Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-13670)

Joomla Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-23755)

Oracle JRE CVE-2013-5780 Vulnerability (CVE-2013-5780)

Severity

High

Classification

CVE-2025-3641 CWE-94 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities