CVE-2025-62393

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Oct 23, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-623944.3Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive qCVE-2025-623954.3A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system contexCVE-2025-623965.3An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP hCVE-2025-623975.3The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissancCVE-2025-623985.4A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potenCVE-2025-623997.5Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible tCVE-2025-62405.0Improper Input Validation vulnerability in Profisee on Windows (filesystem modules) allows Path Traversal after authentication to the ProfisCVE-2025-624006.5Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reCVE-2025-624014.3An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than alloweCVE-2025-624025.4API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the eCVE-2025-624037.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coCVE-2025-624048.0Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a
CVE-2025-62393: Medium severity, CVSS 4.3 | Vulnix