CVE-2025-53021
1 advisory.
Packagist/moodle/moodle CVE-2025-53021: medium 4.2, EPSS 0.33%
Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter
Action: Upgrade moodle/moodle to 4.0.0 or later.
composer require moodle/moodle:4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-cgvv-3455-824j
- https://nvd.nist.gov/vuln/detail/CVE-2025-53021
- https://github.com/moodle/moodle
- https://github.com/moodle/moodle/releases/tag/v3.11.18
- https://moodledev.io/general/releases#moodle-311
- https://rentry.co/moodle-oauth2-cve
CVE-2025-53021 · published · modified · JSON