CVE-2025-62397

Опубликовано: 23 окт. 2025

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

Ссылки

https://access.redhat.com/security/cve/CVE-2025-62397
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2404430
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 5.0.0 (включая) до 5.0.3 (исключая)

EPSS

Процентиль: 20%

0.00279

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209

Связанные уязвимости

CVE-2025-62397

CVSS3: 5.3

ubuntu

около 1 года назад

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

CVE-2025-62397

CVSS3: 5.3

debian

около 1 года назад

The router\u2019s inconsistent response to invalid course IDs allowed ...

GHSA-rc65-mhj4-hp4r

CVSS3: 5.3

github

около 1 года назад

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

ALT-PU-2026-2741

CVSS3: 10

altlinux

9 месяцев назад

ALT-PU-2026-2741: package `moodle` update to version 5.1.2-alt2

EPSS

Процентиль: 20%

0.00279

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209