Moodle exposed the names of hidden groups to users
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-62400US | medium6.5 | — | ||
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group informa… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/CVE-2025-62400WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2404433WEB
- https://github.com/moodle/moodlePACKAGE
- https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05WEB
- https://moodle.org/mod/forum/discuss.php?d=470389WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-62400ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan