A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2025-3625 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2359690 | Issue Tracking |
Configurations
Configuration 1 (hide)
|
History
24 Jun 2025, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Moodle
Moodle moodle |
|
| CPE | cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* | |
| References | () https://access.redhat.com/security/cve/CVE-2025-3625 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2359690 - Issue Tracking |
25 Apr 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-25 15:15
Updated : 2025-06-24 16:17
NVD link : CVE-2025-3625
Mitre link : CVE-2025-3625
JSON object : View
Products Affected
moodle
- moodle
CWE
No CWE.