VULNERABILITY INTELLIGENCE
CVE-2025-62393
CVSS score4.3 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-10-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.
Weakness classification
- patrick@puiterwijk.org: CWE-284
Primary references
- patrick@puiterwijk.org — Third Party Advisory
- patrick@puiterwijk.org — Issue Tracking, Third Party Advisory
- patrick@puiterwijk.org — Issue Tracking, Vendor Advisory