CVE-2025-62393

Published: Oct 23, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

Affected (1)

Products: Moodle: Moodle

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	From 5.0.0 to 5.0.3

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (3)

https://access.redhat.com/security/cve/CVE-2025-62393

Source: patrick@puiterwijk.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2404426

Source: patrick@puiterwijk.org

Issue TrackingThird Party Advisory

https://moodle.org/mod/forum/discuss.php?d=470381

Source: patrick@puiterwijk.org

Issue TrackingVendor Advisory

Timeline

No history available yet.