Vulnerability Details CVE-2025-62394
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.9%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2025-62394
-
cpe:2.3:a:moodle:moodle:4.5.0
-
cpe:2.3:a:moodle:moodle:4.5.1
-
cpe:2.3:a:moodle:moodle:4.5.2
-
cpe:2.3:a:moodle:moodle:4.5.3
-
cpe:2.3:a:moodle:moodle:4.5.4
-
cpe:2.3:a:moodle:moodle:4.5.5
-
cpe:2.3:a:moodle:moodle:4.5.6
-
cpe:2.3:a:moodle:moodle:5.0.0
-
cpe:2.3:a:moodle:moodle:5.0.1
-
cpe:2.3:a:moodle:moodle:5.0.2