CVE-2025-3625

Summary

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).

Affected Software

VendorProductVersion RangeStatus
4.5.0 < 4.5.4affected
4.4.0 < 4.4.8affected
4.3.0 < 4.3.12affected

Weaknesses

  • CWE-639: Authorization Bypass Through User-Controlled Key

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References