CVE-2025-62393

Medium CVSS: 4.3

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

Vendor

Moodle

Product

Moodle

CWE

CWE-284

Yayın Tarihi

2025-10-23 12:15:31

Güncelleme

2025-11-14 19:39:55

Source Identifier

patrick@puiterwijk.org

KEV Date Added

Kategoriler

CWE-284 Moodle MEDIUM Moodle 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-62393 https://bugzilla.redhat.com/show_bug.cgi?id=2404426 https://moodle.org/mod/forum/discuss.php?d=470381

Benzer Kayıtlar

High

CVE-2026-26046

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration…

Medium

CVE-2026-26047

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete…

High

CVE-2026-26045

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va…

Medium

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs…

High

CVE-2025-67849

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt…

High

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o…