CVE-2025-34031 | Query Parameter jsmol.php file_get_contents path traversal (EDB-46881)

A vulnerability was found in up to 6.1 on Moodle. It has been declared as critical. Affected by this vulnerability is the function file_get_contents of the file jsmol.php of the component Query Parameter Handler. The manipulation leads to path traversal.

This vulnerability is known as CVE-2025-34031. The attack can be launched remotely. Furthermore, there is an exploit available.