Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-controlled pages after they have successfully authenticated. This occurs due to insufficient validation of redirect parameters, which could lead to phishing attacks or information disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-67852 Open Redirect Vulnerability in Moodle OAuth Login Flow Enables Phishing Attacks https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-67852
Post summary
An open redirect vulnerability in Moodle’s OAuth login flow is disclosed, highlighting its potential for phishing attacks; no PoC, exploit, or patch details are provided.
CVE-2025-67852 A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-controlled pages after they … https://www.cve.org/CVERecord?id=CVE-2025-67852
Post summary
A newly disclosed Moodle flaw is an open redirect in the OAuth login flow, enabling attackers to send users to malicious sites.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | moodle | moodle | - | - | - |
| App | moodle | moodle | 5.1.0 | - | - |