CVEvulnerability
CVE-2025-3634
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-287
Description
A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary safety checks. Specifically, users can sign up for courses prematurely, even if they haven't finished two-step verification processes.
Affected configurations
• moodle moodle (>= 4.3.0 < 4.3.12)
• moodle moodle (>= 4.4.0 < 4.4.8)
• moodle moodle (>= 4.5.0 < 4.5.4)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://access.redhat.com/security/cve/CVE-2025-3634 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2359707 Issue Tracking