CVE-2025-3635 — Moodle: csrf risk in moodle user tours manager allows tour duplication
A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request…
Published: 2025-04-25 · CVSS: 3.5 · CVSS 3.1
A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7