CVE-2025-3638

HIGH 8.8

Moodle: csrf risk in brickfield tool's analysis request action

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.

CWE	CWE-352
Published	Apr 25, 2025
Last Updated	Apr 28, 2025

Stay Ahead of the Next One

Get instant alerts for

Be the first to know when new high vulnerabilities are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

References

NVD ↗ CVE.org ↗ EPSS Data ↗

access.redhat.com: https://access.redhat.com/security/cve/CVE-2025-3638 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2359732 moodle.org: https://moodle.org/mod/forum/discuss.php?d=467600

Credits

Red Hat would like to thank Vincent Schneider for reporting this issue.