CVEvulnerability
CVE-2025-3625
7.1 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
- Weaknesses
- CWE-639
Description
A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).
Affected configurations
• moodle moodle (>= 4.3.0 < 4.3.12)
• moodle moodle (>= 4.4.0 < 4.4.8)
• moodle moodle (>= 4.5.0 < 4.5.4)
Related
Weakness · CWE (1)
- CWE-639 Authorization Bypass Through User-Controlled Key weakness
References
- https://access.redhat.com/security/cve/CVE-2025-3625 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2359690 Issue Tracking