CVE-2025-67855: Mooodle: mooodle: information disclosure and script execution via reflected cross-site scripting
A flaw was found in Moodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.
Other sources
A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.
— MITRE
A reflected XSS vulnerability in the policy tool return URL allowed attackers to inject malicious script via crafted links. The root cause was insufficient sanitization of URL parameters before reflection
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67855?
CVE-2025-67855 has been classified as a medium severity vulnerability due to the potential for information disclosure and script execution.
How do I fix CVE-2025-67855?
To mitigate CVE-2025-67855, upgrade to the latest versions of Moodle: 5.1.1, 5.0.4, 4.5.8, 4.4.12, or 4.1.22.
What is the impact of CVE-2025-67855?
CVE-2025-67855 can lead to reflected cross-site scripting (XSS), allowing attackers to execute scripts in the context of authenticated users.
Who is affected by CVE-2025-67855?
CVE-2025-67855 affects users of Moodle versions prior to 5.1.1, 5.0.4, 4.5.8, 4.4.12, and 4.1.22.
What type of vulnerability is CVE-2025-67855?
CVE-2025-67855 is categorized as a reflected cross-site scripting (XSS) vulnerability.