~ / search / GHSA-rjcm-7v2p-9265

GHSA-rjcm-7v2p-9265

Moodle course access permissions are not properly checked in course_output_fragment_course_overview

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-62393

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 5.0.0-beta, < 5.0.3 5.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

References

External links from the advisory. They lead to third-party sites.