CVE-2025-3634

Published: Apr 25, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: patrick@puiterwijk.org (Secondary)

Description

A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary safety checks. Specifically, users can sign up for courses prematurely, even if they haven't finished two-step verification processes.

Affected (3)

Products: Moodle: Moodle

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	From 4.3.0 to 4.3.12
Moodle Moodle	From 4.4.0 to 4.4.8
Moodle Moodle	From 4.5.0 to 4.5.4

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://access.redhat.com/security/cve/CVE-2025-3634

Source: patrick@puiterwijk.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2359707

Source: patrick@puiterwijk.org

Issue Tracking

Timeline

No history available yet.