GHSA-xvmh-25jw-gmmmHighCVSS 8.8

Moodle affected by a code injection vulnerability

Published
January 23, 2026
Last Modified
January 26, 2026

🔗 CVE IDs covered (1)

CVE-2025-67847 →

📋 Description

A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.

🎯 Affected products5

  • composer/moodle/moodle:>= 5.1.0-beta, < 5.1.1
  • composer/moodle/moodle:>= 5.0.0-beta, < 5.0.4
  • composer/moodle/moodle:>= 4.5.0-beta, < 4.5.8
  • composer/moodle/moodle:>= 4.2.0-beta, < 4.4.12
  • composer/moodle/moodle:< 4.1.22

🔗 References (4)