Nixpkgs Security Tracker

Untriaged

Permalink CVE-2025-3627

created 5 months ago

Moodle: partial data exposure in moodle before completing multi-factor authentication

A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication (2FA).

Affected products

moodle

<4.5.4
<4.3.12
<4.4.8

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable -
- nixpkgs-unstable 5.0.2

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable -
- nixpkgs-unstable 2.3.13

Package maintainers

@freezeboy freezeboy
@kmein Kierán Meinhardt <kmein@posteo.de>

Suggestion detail

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers