Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-67851 Formula Injection Vulnerability in Moodle Enabling Arbitrary Spreadsheet Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-67851
Post summary
CVE‑2025‑67851 is a Moodle formula‑injection flaw that allows arbitrary spreadsheet execution; the post provides the vulnerability description but no PoC, exploit code, active exploitation evidence, or patch details.
CVE-2025-67851 A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by… https://www.cve.org/CVERecord?id=CVE-2025-67851
Post summary
A formula injection vulnerability (CVE-2025-67851) was discovered in Moodle, allowing remote attackers to inject formulas when data fields are exported without proper escaping.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | moodle | moodle | - | - | - |
| App | moodle | moodle | 5.1.0 | - | - |