CVE-2025-62395

Medium CVSS: 4.3

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

Vendor

Moodle

Product

Moodle

CWE

CWE-284

Yayın Tarihi

2025-10-23 12:15:31

Güncelleme

2025-11-14 19:39:08

Source Identifier

patrick@puiterwijk.org

KEV Date Added

Kategoriler

CWE-284 Moodle MEDIUM Moodle 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-62395 https://bugzilla.redhat.com/show_bug.cgi?id=2404428

Benzer Kayıtlar

High

CVE-2026-26046

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration…

Medium

CVE-2026-26047

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete…

High

CVE-2026-26045

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va…

Medium

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs…

High

CVE-2025-67849

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt…

High

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o…