CVE-2025-62401

4.3 mediumEPSS 0.2%

Medium (4.3) in moodle moodle. EPSS 0.2% chance of exploitation in the next 30 days.

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2025-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

https://access.redhat.com/security/cve/CVE-2025-62401
https://bugzilla.redhat.com/show_bug.cgi?id=2404434

Check your stack JSON