← CVE Intelligence

CVE-2025-62394

Moodle: quiz notifications sent to suspended participants PUBLISHED

Description (CNA)

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 5.0.0 before 5.0.3; affected 4.5.0 before 4.5.7

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.