CVE-2025-3625

7.1

HIGHCVSS v3

Published

April 25, 2025

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).

moodle/moodle

GitHubMoodle - the world's open source learning platform

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4NVD

moodle

Crates.ioMoodle Webservice Client in Rust.

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4NVD

moodle

NPM

More on this CVE

NVD↗GitHub Advisory↗

Model module for node for use with both mongodb and mysql.

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4NVD

moodle

Python Package IndexMoodle web services connection library

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4NVD

moodle

RubyGemsInteract with Moodle from ruby

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

>= 4.3.0, < 4.3.12, >= 4.4.0, < 4.4.8, >= 4.5.0, < 4.5.4NVD

Security Advisories

CVE-2025-3625

Description

More on this CVE