CVE-2025-62395: Moodle: external cohort search service leaks system cohort data
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.
Other sources
The external cohort search method failed to properly enforce context-based capability checks. A user with permission to manage cohorts in a local context could enumerate or access data from higher-level (system) cohorts, exposing sensitive administrative information.
Versions affected: 5.0 to 5.0.2, 4.5 to 4.5.6, 4.4 to 4.4.10, 4.1 to 4.1.20 and earlier unsupported versions Versions fixed: 5.0.3, 4.5.7, 4.4.11 and 4.1.21
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62395?
CVE-2025-62395 is classified as a medium-severity vulnerability due to its potential to expose restricted administrative data.
How do I fix CVE-2025-62395?
To remediate CVE-2025-62395, ensure that your Moodle installation is updated to the latest version that addresses this vulnerability.
Who is affected by CVE-2025-62395?
CVE-2025-62395 affects users of Moodle who have permissions that could allow access to cohort information inappropriately.
What types of data can be exposed due to CVE-2025-62395?
CVE-2025-62395 can lead to the exposure of restricted administrative data within the cohort search web service.
Is there a workaround for CVE-2025-62395?
Currently, the best approach for CVE-2025-62395 is applying the available security updates to mitigate the risk.