CVE-2025-2201

Broken access control vulnerability in the IcProgress Innovación y Cualificación plugin. This vulnerability allows an attacker to obtain sensitive information about other users such as public IP addresses, messages with other users and more.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - cve-coordination@incibe.es

Published

2025-03-17

Last modified

2025-03-17

Weaknesses

CWE-863

Affected products

• Icprogreso Plugin (Innovacin Y Cualificacin)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-moodle-innovacion-y-cualificacion-plugins