References https://moodle.org/security/ https://app.opencve.io/cve/?vendor=moodle https://nvd.nist.gov/vuln/detail/CVE-2025-3641 https://blog.redteam-pentesting.de/2024/moodle-rce/ https://www.hkcert.org/tc/security-bulletin/moodle-multiple-vulnerabilities-2 https://avd.aliyun.com/product?prod=moodle https://www.cnvd.org.cn/flaw/show/CNVD-2024-44850 https://isms-pims.mcu.edu.tw/2024/09/03/%E3%80%90%E6%BC%8F%E6%B4%9E%E9%A0%90%E8%AD%A6%E3%80%91moodle-%E9%81%A0%E7%AB%AF%E7%A8%8B%E5%BC%8F%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9Ecve-2024-43425/ https://cloud.tencent.com/developer/article/2359300 https://moodle.org/mod/forum/discuss.php?d=469466
Related VulnerabilitiesMoodle LMS Jmol插件路径遍历PoCCVE-2021-26812: Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site ScriptingPoCCVE-2022-35653: Moodle LTI module Reflected - Cross-Site ScriptingPoCCVE-2023-30943: Moodle - Cross-Site Scripting/Remote Code ExecutionPoCCVE-2024-43425: Moodle - Remote Code ExecutionPoCCVE-2025-34031: Moodle Jmol Filter 6.1 - Local File InclusionPoCCVE-2025-34032: Moodle LMS Jmol Plugin <= 6.1 - Cross-Site ScriptingPoCCVE-2021-32478: Moodle 3.8-3.10.3 - Reflected XSS & Open RedirectPoCmoodle-installer: Moodle Installation ExposureMoodle CVE-2022-0332 SQL注入漏洞Moodle 任意文件上传漏洞