CVE-2025-67852

A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-controlled pages after they have successfully authenticated. This occurs due to insufficient validation of redirect parameters, which could lead to phishing attacks or information disclosure.

• CWE-601

• https://access.redhat.com/security/cve/CVE-2025-67852Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2423844Issue Tracking, Third Party Advisory

Published

Feb 3, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67847A flaw was found in Moodle. An attacker with access to the r…8.8
• CVE-2025-67848A flaw was found in Moodle. This authentication bypass vulne…8.1
• CVE-2025-67849A flaw was found in Moodle. This cross-site scripting (XSS) …6.1
• CVE-2025-6785Securing externally available CAN wires can easily allow phy…4.7
• CVE-2025-67850A flaw was found in moodle. This vulnerability, known as Cro…6.1
• CVE-2025-67851A flaw was found in moodle. This formula injection vulnerabi…7.8
• CVE-2025-67853A flaw was found in Moodle. A remote attacker could exploit …7.5
• CVE-2025-67855A flaw was found in mooodle. A remote attacker could exploit…6.1
• CVE-2025-67856A flaw was found in Moodle. An authorization logic flaw, spe…9.8
• CVE-2025-67857A flaw was found in moodle. During anonymous assignment subm…5.3
• CVE-2025-67858A Improper Neutralization of Argument Delimiters vulnerabili…7
• CVE-2025-67859A Improper Authentication vulnerability in TLP allows local …5.1