CVE-2025-3627 — Moodle: partial data exposure in moodle before completing multi-factor authentication

CVE-2025-3627

Moodle: partial data exposure in moodle before completing multi-factor authentication PUBLISHED

Description (CNA)

A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication (2FA).

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 4.5.0 before 4.5.4; affected 4.4.0 before 4.4.8; affected 4.3.0 before 4.3.12

CWE

CWE-287

References

https://access.redhat.com/security/cve/CVE-2025-3627
https://bugzilla.redhat.com/show_bug.cgi?id=2359692

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.