CVE-2025-62394

Medium CVSS: 4.3

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

Vendor

Moodle

Product

Moodle

CWE

CWE-863

Yayın Tarihi

2025-10-23 12:15:31

Güncelleme

2025-11-14 19:40:17

Source Identifier

patrick@puiterwijk.org

KEV Date Added

Kategoriler

CWE-863 Moodle MEDIUM Moodle 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-62394 https://bugzilla.redhat.com/show_bug.cgi?id=2404427

Benzer Kayıtlar

High

CVE-2026-26046

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration…

Medium

CVE-2026-26047

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete…

High

CVE-2026-26045

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va…

Medium

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs…

High

CVE-2025-67849

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt…

High

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o…