7.8

CVE-2025-67851

Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export

Formula injection risk when exporting data to CSV / Excel

A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.
Mögliche Gegenmaßnahme
Moodle Server: Update to a patched version.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moodle ≫ Moodle Version < 4.1.22
Moodle ≫ Moodle Version >= 4.4.0 < 4.4.11
Moodle ≫ Moodle Version >= 4.5.0 < 4.5.8
Moodle ≫ Moodle Version >= 5.0.0 < 5.0.4
Moodle ≫ Moodle Version5.1.0 Update-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Weitere Schwachstelleninformationen
SystemMoodle
≫
Produkt Moodle Server
Version < 4.1.0
Version >= 5.1.0, < 5.1.1
Version >= 5.0.0, < 5.0.4
Version >= 4.5.0, < 4.5.8
Version >= 4.4.0, < 4.4.12
Version >= 4.1.0, < 4.1.22
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.151
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
patrick@puiterwijk.org 6.1 1.3 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
CWE-1236 Improper Neutralization of Formula Elements in a CSV File

The product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.

https://bugzilla.redhat.com/show_bug.cgi?id=2423841
Third Party Advisory
Issue Tracking