Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-62400

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.

VectorNETWORK

PublishedOct 23, 2025, 12:15

Published Bypatrick@puiterwijk.org

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)5.0.0-beta5.0.3N/A

moodle/moodle(Packagist)4.5.0-beta4.5.7N/A

moodle/moodle(Packagist)4.2.0-beta4.4.11N/A

moodle/moodle(Packagist)04.1.21N/A

References

https://access.redhat.com/security/cve/CVE-2025-62400
https://bugzilla.redhat.com/show_bug.cgi?id=2404433

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK