Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-54733

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin local_o365 Teams SSO endpoint sso_login.php base64-decodes a JWT payload and authenticates users from the upn claim without verifying the JWT signature, allowing an unauthenticated attacker to forge a token and obtain a Moodle session as an O365-authenticated user. This issue is fixed in ver
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:864e5154948497e2918ac0abe70721087e81f7dfa7834c317cf13ccd4b001a93
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"o365-moodle","vendor":"microsoft","versions":[{"status":"affected","version":"< 4.5.6"},{"status":"affected","version":">= 5.0.0, < 5.0.5"},{"status":"affected","version":">= 5.1.0, < 5.1.1"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-347","description":"CWE-347: Improper Verification of Cryptographic Signature","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/problemTypes/0/descriptions/0

Source references

7 source assertions
{"name":"https://github.com/microsoft/o365-moodle/commit/01b2d4c2e13b06a66557527084cbf9bace655944","tags":["x_refsource_MISC"],"url":"https://github.com/microsoft/o365-moodle/commit/01b2d4c2e13b06a66557527084cbf9bace655944"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/references/1
{"name":"https://github.com/microsoft/o365-moodle/commit/258872f6e2011f4efa8ebb77d2898142a9435e89","tags":["x_refsource_MISC"],"url":"https://github.com/microsoft/o365-moodle/commit/258872f6e2011f4efa8ebb77d2898142a9435e89"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/references/2
{"name":"https://github.com/microsoft/o365-moodle/commit/d5596655f0baaee0f11aec2e10d6f36b0bd29220","tags":["x_refsource_MISC"],"url":"https://github.com/microsoft/o365-moodle/commit/d5596655f0baaee0f11aec2e10d6f36b0bd29220"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/references/3
{"name":"https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m405","tags":["x_refsource_MISC"],"url":"https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m405"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/references/4
{"name":"https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m500","tags":["x_refsource_MISC"],"url":"https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m500"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/references/5
{"name":"https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m501","tags":["x_refsource_MISC"],"url":"https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m501"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/references/6
{"name":"https://github.com/microsoft/o365-moodle/security/advisories/GHSA-hqjh-93qv-47v5","tags":["x_refsource_CONFIRM"],"url":"https://github.com/microsoft/o365-moodle/security/advisories/GHSA-hqjh-93qv-47v5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d008e293254329437b8e9cf755b32676addafc18ce3e28885cff37b8d7e31845 · sha256:715304cef1eb3c80… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer