CVE-2025-62393
Medium · 4.3Moodle course access permissions are not properly checked in course_output_fragment_course_overview
CVSS
4.3
EPSS
0.2%
Published
Oct 23, 2025
CISA due date
—
The record
A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | moodle/moodle | 5.0.0-beta | 5.0.3 |
| Bitnami | moodle | 5.0.0 | 5.0.3 |
| packagist | moodle/moodle | 5.0.0-beta | 5.0.3 |
Related vulnerabilities
- GHSA-rjcm-7v2p-9265 Moodle course access permissions are not properly checked in… Same vulnerability
- GHSA-ggxq-2mg9-8966 Moodle has a Remote Code Execution risk via file restore Also affects moodle/moodle
- GHSA-cg8j-5cr2-568q Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits Also affects moodle/moodle
- CVE-2026-26047 A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. Also affects moodle/moodle
- CVE-2026-26045 A flaw was identified in Moodle’s backup restore functionality where specially crafted… Also affects moodle/moodle
- GHSA-5cx4-w4fh-fr57 Moodle Affected by Improper Restriction of Excessive Authentication Attempts Also affects moodle/moodle
- GHSA-8jrv-wx83-w3xj Moodle Inserts Sensitive Information Into Sent Data Also affects moodle/moodle
- GHSA-hcm6-q6pc-xfhm Moodle has an authorization logic flaw Also affects moodle/moodle