Description
A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).
CVSS Metrics
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
- Attack Vector
- network
- Complexity
- low
- Privileges
- low
- User Action
- none
- Scope
- unchanged
- Confidentiality
- low
- Integrity
- none
- Availability
- high
- Weaknesses
- CWE-639
Metadata
- Primary Vendor
- MOODLE
- Published
- 4/25/2025
- Last Modified
- 6/24/2025
- Source
- NIST NVD
- Note: Verify all details with official vendor sources before applying patches.
Affected Products
moodle : moodlemoodle : moodlemoodle : moodle
AI-Powered Remediation
Generate remediation guidance or a C-suite brief for this vulnerability.