CVE-2025-3625

7.1 highEPSS 0.4%

High (7.1) in moodle moodle. EPSS 0.4% chance of exploitation in the next 30 days.

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2025-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

https://access.redhat.com/security/cve/CVE-2025-3625
https://bugzilla.redhat.com/show_bug.cgi?id=2359690

Check your stack JSON