CVE-2025-62401

Published: Oct 23, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

Affected (4)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	From 4.1.0 to 4.1.21
Moodle Moodle	From 4.4.0 to 4.4.11
Moodle Moodle	From 4.5.0 to 4.5.7
Moodle Moodle	From 5.0.0 to 5.0.3

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://access.redhat.com/security/cve/CVE-2025-62401

Source: patrick@puiterwijk.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2404434

Source: patrick@puiterwijk.org

Issue TrackingThird Party Advisory

Timeline

No history available yet.