CVEvulnerability
CVE-2025-62393
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-284
Description
A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.
Affected configurations
• moodle moodle (>= 5.0.0 < 5.0.3)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://access.redhat.com/security/cve/CVE-2025-62393 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2404426 Issue Tracking, Third Party Advisory
- https://moodle.org/mod/forum/discuss.php?d=470381 Issue Tracking, Vendor Advisory