Search for packages
| purl | pkg:composer/moodle/moodle@4.4.11 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2h6c-6mgm-akc2 | Moodle vulnerable to brute-force password guesses Moodle's mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks. |
CVE-2025-62399
GHSA-m58f-9pvv-8mp2 |
| VCID-7z2w-xpn7-gbhm | Moodle does not properly enforce MFA A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts. |
CVE-2025-62398
GHSA-25wf-7x6c-wmpf |
| VCID-a6w6-penj-kuds | Moodle has a time restriction bypass An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment. |
CVE-2025-62401
GHSA-w29j-8phw-ffjf |
| VCID-fcf4-tf5h-hfcr | Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information. |
CVE-2025-62400
GHSA-422v-w6c5-vq42 |