CVE-2025-3625

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).

Score

CVSS 3.1 7.1 High

Status

Analyzed - patrick@puiterwijk.org

Published

2025-04-25

Last modified

2025-04-25

Weaknesses

CWE-639

Affected products

• Moodle (Moodle)

References

• https://access.redhat.com/security/cve/CVE-2025-3625
• https://bugzilla.redhat.com/show_bug.cgi?id=2359690