VULNERABILITY INTELLIGENCE

CVE-2025-3625

CVSS score7.1 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-04-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Description

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).

Weakness classification

  • patrick@puiterwijk.org: CWE-639

Primary references