GHSA-rjcm-7v2p-9265
Moodle course access permissions are not properly checked in course_output_fragment_course_overview
At a glance
- Published
- Updated
- CVE
- CVE-2025-62393
- Aliases
- BIT-moodle-2025-62393
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.
Affected packages
| Package | Versions |
|---|---|
| Packagist · moodle/moodle | introduced 5.0.0-beta, fixed 5.0.3 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-62393 ADVISORY
- https://github.com/moodle/moodle/commit/fc69b4744ba0132cc3093fd81940be15bc293835 WEB
- https://access.redhat.com/security/cve/CVE-2025-62393 WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2404426 WEB
- https://github.com/moodle/moodle PACKAGE
- https://moodle.org/mod/forum/discuss.php?d=470381 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |