Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-67857 Moodle Anonymous Assignment Submission User ID Exposure Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-67857
Post summary
The post cites a Moodle vulnerability (CVE-2025-67857) about user ID exposure but offers no proof of concept, exploitation details, patch information, or technical specifics.
CVE-2025-67857 A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewe… https://www.cve.org/CVERecord?id=CVE-2025-67857
Post summary
A data‑exposure flaw in Moodle leaks user identifiers in URLs during anonymous assignment submissions.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | moodle | moodle | - | - | - |
| App | moodle | moodle | 5.1.0 | - | - |