Vulnerability Description
A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moodle | Moodle | >= 4.3.0, < 4.3.12 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2025-3625Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2359690Issue Tracking
FAQ
What is CVE-2025-3625?
CVE-2025-3625 is a vulnerability with a CVSS score of 7.1 (HIGH). A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had c...
How severe is CVE-2025-3625?
CVE-2025-3625 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-3625?
Check the references section above for vendor advisories and patch information. Affected products include: Moodle Moodle.