https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:01:17.796799+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-67851 CVE-2025-67851 — Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export 2026-10-08T03:01:17.798244+00:00

Affected: moodle

A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.