CVE-2025-3634
Moodle: moodle allows course self-enrolment before completing mfa
- State
- Published
- Severity
- 4.3 Medium
- Published
- Apr 25, 2025
- Updated
- Apr 25, 2025
- Reserved
- Apr 15, 2025
Description
A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary safety checks. Specifically, users can sign up for courses prematurely, even if they haven't finished two-step verification processes.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | fedora |
Weaknesses
- CWE-287 Improper Authentication
Affected Products
| Product | Versions |
|---|---|
moodle |
|
References
- https://access.redhat.com/security/cve/CVE-2025-3634vdb-entry
- RHBZ#2359707issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.