CVE-2025-34031: Moodle LMS Jmol Plugin Path Traversal
A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the filegetcontents() function without proper validation, allowing attackers to read arbitrary files from the server's filesystem by crafting a malicious query value. This vulnerability can be exploited without authentication and may expose sensitive configuration data, including database credentials. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34031?
CVE-2025-34031 has a high severity due to its ability to allow attackers to read arbitrary files from the server.
How do I fix CVE-2025-34031?
To fix CVE-2025-34031, update the Moodle LMS Jmol plugin to version 6.2 or later where the vulnerability has been patched.
What impact does CVE-2025-34031 have?
CVE-2025-34031 can lead to unauthorized access to sensitive files on the server, jeopardizing data security.
Which versions are affected by CVE-2025-34031?
CVE-2025-34031 affects the Moodle LMS Jmol plugin version 6.1 and prior.
Is CVE-2025-34031 exploitable remotely?
Yes, CVE-2025-34031 is exploitable remotely as it involves a vulnerability in a publicly accessible script.