Vulnerability Description
A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moodle | Moodle | < 4.1.22 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2025-67851Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2423841Issue TrackingThird Party Advisory
- https://moodle.org/mod/forum/discuss.php?d=471301Vendor Advisory
FAQ
What is CVE-2025-67851?
CVE-2025-67851 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, wh...
How severe is CVE-2025-67851?
CVE-2025-67851 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-67851?
Check the references section above for vendor advisories and patch information. Affected products include: Moodle Moodle.