CVE-2025-62396 — Moodle: router (r.php) could expose application directories
An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.
Published: 2025-10-23 · CVSS: 5.3 · CVSS 3.1
An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7