CVE-2025-3627: Moodle: partial data exposure in moodle before completing multi-factor authentication
A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication (2FA).
Other sources
On sites with Multi-Factor Authentication enabled, it was possible for a user to access some of their data after passing only the first login factor (such as passing a username/password check). The user should have to also pass a second factor check before gaining access to that data.
Versions affected: 4.5 to 4.5.3, 4.4 to 4.4.7 and 4.3 to 4.3.11 Versions fixed: 4.5.4, 4.4.8 and 4.3.12
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3627?
CVE-2025-3627 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-3627?
To fix CVE-2025-3627, update Moodle to version 4.5.4, 4.4.8, or 4.3.12 depending on your current version.
What systems are affected by CVE-2025-3627?
CVE-2025-3627 affects Moodle versions 4.5.0 to 4.5.3, 4.4.0 to 4.4.7, and 4.3.0 to 4.3.11.
What type of vulnerability is CVE-2025-3627?
CVE-2025-3627 is an information disclosure vulnerability that allows users to access sensitive information.
When was CVE-2025-3627 reported?
CVE-2025-3627 was reported in early 2025.