« Volver al listado

CVE-2025-26527

Estado: AnalizadaMedia (5.3)—

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Moodle — Moodle

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-26527",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-26527",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-24T19:57:30.268527Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "patrick@puiterwijk.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "patrick@puiterwijk.org",
      "affectedData": [
        {
          "vendor": "Moodle Project",
          "product": "moodle",
          "versions": [
            {
              "status": "affected",
              "version": "4.5.0",
              "lessThan": "4.5.2",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "4.4.0",
              "lessThan": "4.4.6",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "4.3.0",
              "lessThan": "4.3.10",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "4.1.0",
              "lessThan": "4.1.16",
              "versionType": "semver"
            },
            {
              "status": "unknown",
              "version": "4.2.0",
              "lessThan": "4.2.*",
              "versionType": "semver"
            },
            {
              "status": "unknown",
              "version": "0",
              "lessThan": "4.0.*",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-02-24T20:15:33.403",
  "references": [
    {
      "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941",
      "tags": [
        "Patch"
      ],
      "source": "patrick@puiterwijk.org"
    },
    {
      "url": "https://moodle.org/mod/forum/discuss.php?d=466143",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "patrick@puiterwijk.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "patrick@puiterwijk.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1230"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block."
    },
    {
      "lang": "es",
      "value": " Las etiquetas que no se espera que sean visibles para un usuario aún podrían ser descubiertas por éste a través de la página de búsqueda de etiquetas o en el bloque de etiquetas."
    }
  ],
  "lastModified": "2026-06-17T09:01:58.223",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABE6D6ED-55D3-46B4-84DC-7C3684E3260E",
              "versionEndExcluding": "4.1.16",
              "versionStartIncluding": "4.1.0"
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DF83192-5999-4E1B-B109-A1B0F68437B2",
              "versionEndExcluding": "4.3.10",
              "versionStartIncluding": "4.3.0"
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B91CC5BB-FFB9-4D09-9001-105A8B68208E",
              "versionEndExcluding": "4.4.6",
              "versionStartIncluding": "4.4.0"
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "830F7FD6-3257-44A2-9599-2C5C2FF2BA20",
              "versionEndExcluding": "4.5.2",
              "versionStartIncluding": "4.5.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "patrick@puiterwijk.org"
}