Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-62401

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

VectorNETWORK

PublishedOct 23, 2025, 12:15

Published Bypatrick@puiterwijk.org

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)5.0.0-beta5.0.3N/A

moodle/moodle(Packagist)4.5.0-beta4.5.7N/A

moodle/moodle(Packagist)4.2.0-beta4.4.11N/A

moodle/moodle(Packagist)04.1.21N/A

References

https://access.redhat.com/security/cve/CVE-2025-62401
https://bugzilla.redhat.com/show_bug.cgi?id=2404434

Weakness Type

CWE-285

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK