CVE-2025-62394

4.3

MEDIUMCVSS v3

Published

October 23, 2025

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

moodle/moodle

GitHubMoodle - the world's open source learning platform

>= 4.5.0, < 4.5.7, >= 5.0.0, < 5.0.3, >= 5.0.0-beta, < 5.0.3, >= 4.5.0-beta, < 4.5.7NVD

moodle

Crates.ioMoodle Webservice Client in Rust.

>= 4.5.0, < 4.5.7, >= 5.0.0, < 5.0.3NVD

moodle

NPM

More on this CVE

NVD↗GitHub Advisory↗

Model module for node for use with both mongodb and mysql.

>= 4.5.0, < 4.5.7, >= 5.0.0, < 5.0.3NVD

moodle

Python Package IndexMoodle web services connection library

>= 4.5.0, < 4.5.7, >= 5.0.0, < 5.0.3NVD

moodle

RubyGemsInteract with Moodle from ruby

>= 4.5.0, < 4.5.7, >= 5.0.0, < 5.0.3NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

>= 4.5.0, < 4.5.7, >= 5.0.0, < 5.0.3NVD

Security Advisories

CVE-2025-62394

Description

More on this CVE