CVE-2025-3625
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 639
Summary
CVE-2025-3625 is a newly discovered vulnerability in the Moodle learning management system. This issue permits unauthorized access to student information and disrupts their login process, even after successful two-factor authentication (2FA). Hackers can exploit this vulnerability to obtain sensitive data and deny students access to their accounts. The exact nature of the exploit is yet to be disclosed, but users are strongly advised to apply the available patch as soon as possible to mitigate potential risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.