CVE-2025-62395

4.3 mediumEPSS 0.2%

Medium (4.3) in moodle moodle. EPSS 0.2% chance of exploitation in the next 30 days.

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

https://access.redhat.com/security/cve/CVE-2025-62395
https://bugzilla.redhat.com/show_bug.cgi?id=2404428

Check your stack JSON