7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
Basic Information
ID
CVE-2025-62399
Source
fedora
Published
Oct 23, 2025 at 11:28
Affected Product
Version
4.1.0
Affected Versions
5.0.0
4.5.0
4.4.0
4.1.0
4.5.0
4.4.0
4.1.0