← Back

CVE-2025-3627

nvd nist
Published: Apr 25, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: patrick@puiterwijk.org (Secondary)

Description

A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication (2FA).

Affected (3)

Products: Moodle: Moodle
Moodle
1 product
Moodle
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Moodle
From 4.3.0 to 4.3.12
Moodle
From 4.4.0 to 4.4.8
Moodle
From 4.5.0 to 4.5.4

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: patrick@puiterwijk.org
Third Party Advisory
Source: patrick@puiterwijk.org
Issue Tracking

Timeline

No history available yet.