CVE-2025-3625 in Moodle

Riassunto

di MITRE • 25/04/2025

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 15/04/2025
• Divulgazione: 25/04/2025
• Moderazione: accettato
• Voce: VDB-305975
• CPE: pronto
• CWE: CWE-99 (confermato)
• CVSS: 7.1 (CNA)
• EPSS: 0.00391
• KEV: no
• Attività: molto basso
• Settore: Police, Education

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3625
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3625
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3625/