Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-k5wq-xvyj-a7bq |
| Summary | Moodle course access permissions are not properly checked in course_output_fragment_course_overview
A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details. |
| Aliases |
| 0 |
|
| 1 |
| alias |
GHSA-rjcm-7v2p-9265 |
|
|
| Fixed_packages |
|
| Affected_packages |
| 0 |
| url |
pkg:composer/moodle/moodle@5.0.0-beta |
| purl |
pkg:composer/moodle/moodle@5.0.0-beta |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1efm-18zh-w7gm |
|
| 1 |
| vulnerability |
VCID-3m96-nmxm-tfgz |
|
| 2 |
| vulnerability |
VCID-44zf-1dw7-qkf5 |
|
| 3 |
| vulnerability |
VCID-4zvp-nmrk-4qbq |
|
| 4 |
| vulnerability |
VCID-5snb-dyv3-efe9 |
|
| 5 |
| vulnerability |
VCID-5xhb-mx3v-fuhs |
|
| 6 |
| vulnerability |
VCID-61ry-zz34-8qhj |
|
| 7 |
| vulnerability |
VCID-657g-68tv-dkam |
|
| 8 |
| vulnerability |
VCID-7trf-g8dq-tua1 |
|
| 9 |
| vulnerability |
VCID-dr5e-6s1a-6uas |
|
| 10 |
| vulnerability |
VCID-ey6g-spfk-7bcw |
|
| 11 |
| vulnerability |
VCID-f1da-1duc-2uhb |
|
| 12 |
| vulnerability |
VCID-hufb-p6pa-63c9 |
|
| 13 |
| vulnerability |
VCID-j3ts-5ghc-4qct |
|
| 14 |
| vulnerability |
VCID-k5wq-xvyj-a7bq |
|
| 15 |
| vulnerability |
VCID-m2a7-q28u-1yfw |
|
| 16 |
| vulnerability |
VCID-wby4-h9ud-1yh5 |
|
| 17 |
| vulnerability |
VCID-yby1-g45r-rugg |
|
| 18 |
| vulnerability |
VCID-ykj6-ptd4-7qfs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.0-beta |
|
| 1 |
| url |
pkg:composer/moodle/moodle@5.0.0-rc1 |
| purl |
pkg:composer/moodle/moodle@5.0.0-rc1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1efm-18zh-w7gm |
|
| 1 |
| vulnerability |
VCID-3m96-nmxm-tfgz |
|
| 2 |
| vulnerability |
VCID-44zf-1dw7-qkf5 |
|
| 3 |
| vulnerability |
VCID-4zvp-nmrk-4qbq |
|
| 4 |
| vulnerability |
VCID-5snb-dyv3-efe9 |
|
| 5 |
| vulnerability |
VCID-5xhb-mx3v-fuhs |
|
| 6 |
| vulnerability |
VCID-61ry-zz34-8qhj |
|
| 7 |
| vulnerability |
VCID-657g-68tv-dkam |
|
| 8 |
| vulnerability |
VCID-7trf-g8dq-tua1 |
|
| 9 |
| vulnerability |
VCID-dr5e-6s1a-6uas |
|
| 10 |
| vulnerability |
VCID-ey6g-spfk-7bcw |
|
| 11 |
| vulnerability |
VCID-f1da-1duc-2uhb |
|
| 12 |
| vulnerability |
VCID-hufb-p6pa-63c9 |
|
| 13 |
| vulnerability |
VCID-j3ts-5ghc-4qct |
|
| 14 |
| vulnerability |
VCID-k5wq-xvyj-a7bq |
|
| 15 |
| vulnerability |
VCID-m2a7-q28u-1yfw |
|
| 16 |
| vulnerability |
VCID-wby4-h9ud-1yh5 |
|
| 17 |
| vulnerability |
VCID-yby1-g45r-rugg |
|
| 18 |
| vulnerability |
VCID-ykj6-ptd4-7qfs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.0-rc1 |
|
| 2 |
| url |
pkg:composer/moodle/moodle@5.0.0-rc2 |
| purl |
pkg:composer/moodle/moodle@5.0.0-rc2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1efm-18zh-w7gm |
|
| 1 |
| vulnerability |
VCID-3m96-nmxm-tfgz |
|
| 2 |
| vulnerability |
VCID-44zf-1dw7-qkf5 |
|
| 3 |
| vulnerability |
VCID-4zvp-nmrk-4qbq |
|
| 4 |
| vulnerability |
VCID-5snb-dyv3-efe9 |
|
| 5 |
| vulnerability |
VCID-5xhb-mx3v-fuhs |
|
| 6 |
| vulnerability |
VCID-61ry-zz34-8qhj |
|
| 7 |
| vulnerability |
VCID-657g-68tv-dkam |
|
| 8 |
| vulnerability |
VCID-7trf-g8dq-tua1 |
|
| 9 |
| vulnerability |
VCID-dr5e-6s1a-6uas |
|
| 10 |
| vulnerability |
VCID-ey6g-spfk-7bcw |
|
| 11 |
| vulnerability |
VCID-f1da-1duc-2uhb |
|
| 12 |
| vulnerability |
VCID-hufb-p6pa-63c9 |
|
| 13 |
| vulnerability |
VCID-j3ts-5ghc-4qct |
|
| 14 |
| vulnerability |
VCID-k5wq-xvyj-a7bq |
|
| 15 |
| vulnerability |
VCID-m2a7-q28u-1yfw |
|
| 16 |
| vulnerability |
VCID-wby4-h9ud-1yh5 |
|
| 17 |
| vulnerability |
VCID-yby1-g45r-rugg |
|
| 18 |
| vulnerability |
VCID-ykj6-ptd4-7qfs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.0-rc2 |
|
| 3 |
| url |
pkg:composer/moodle/moodle@5.0.0-rc3 |
| purl |
pkg:composer/moodle/moodle@5.0.0-rc3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1efm-18zh-w7gm |
|
| 1 |
| vulnerability |
VCID-3m96-nmxm-tfgz |
|
| 2 |
| vulnerability |
VCID-44zf-1dw7-qkf5 |
|
| 3 |
| vulnerability |
VCID-4zvp-nmrk-4qbq |
|
| 4 |
| vulnerability |
VCID-5snb-dyv3-efe9 |
|
| 5 |
| vulnerability |
VCID-5xhb-mx3v-fuhs |
|
| 6 |
| vulnerability |
VCID-61ry-zz34-8qhj |
|
| 7 |
| vulnerability |
VCID-657g-68tv-dkam |
|
| 8 |
| vulnerability |
VCID-7trf-g8dq-tua1 |
|
| 9 |
| vulnerability |
VCID-dr5e-6s1a-6uas |
|
| 10 |
| vulnerability |
VCID-ey6g-spfk-7bcw |
|
| 11 |
| vulnerability |
VCID-f1da-1duc-2uhb |
|
| 12 |
| vulnerability |
VCID-hufb-p6pa-63c9 |
|
| 13 |
| vulnerability |
VCID-j3ts-5ghc-4qct |
|
| 14 |
| vulnerability |
VCID-k5wq-xvyj-a7bq |
|
| 15 |
| vulnerability |
VCID-m2a7-q28u-1yfw |
|
| 16 |
| vulnerability |
VCID-wby4-h9ud-1yh5 |
|
| 17 |
| vulnerability |
VCID-yby1-g45r-rugg |
|
| 18 |
| vulnerability |
VCID-ykj6-ptd4-7qfs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.0-rc3 |
|
| 4 |
| url |
pkg:composer/moodle/moodle@5.0.0 |
| purl |
pkg:composer/moodle/moodle@5.0.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1efm-18zh-w7gm |
|
| 1 |
| vulnerability |
VCID-3m96-nmxm-tfgz |
|
| 2 |
| vulnerability |
VCID-44zf-1dw7-qkf5 |
|
| 3 |
| vulnerability |
VCID-4zvp-nmrk-4qbq |
|
| 4 |
| vulnerability |
VCID-5snb-dyv3-efe9 |
|
| 5 |
| vulnerability |
VCID-5xhb-mx3v-fuhs |
|
| 6 |
| vulnerability |
VCID-61ry-zz34-8qhj |
|
| 7 |
| vulnerability |
VCID-657g-68tv-dkam |
|
| 8 |
| vulnerability |
VCID-7trf-g8dq-tua1 |
|
| 9 |
| vulnerability |
VCID-dr5e-6s1a-6uas |
|
| 10 |
| vulnerability |
VCID-ey6g-spfk-7bcw |
|
| 11 |
| vulnerability |
VCID-f1da-1duc-2uhb |
|
| 12 |
| vulnerability |
VCID-hufb-p6pa-63c9 |
|
| 13 |
| vulnerability |
VCID-j3ts-5ghc-4qct |
|
| 14 |
| vulnerability |
VCID-k5wq-xvyj-a7bq |
|
| 15 |
| vulnerability |
VCID-m2a7-q28u-1yfw |
|
| 16 |
| vulnerability |
VCID-wby4-h9ud-1yh5 |
|
| 17 |
| vulnerability |
VCID-yby1-g45r-rugg |
|
| 18 |
| vulnerability |
VCID-ykj6-ptd4-7qfs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.0 |
|
| 5 |
| url |
pkg:composer/moodle/moodle@5.0.1 |
| purl |
pkg:composer/moodle/moodle@5.0.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1efm-18zh-w7gm |
|
| 1 |
| vulnerability |
VCID-3m96-nmxm-tfgz |
|
| 2 |
| vulnerability |
VCID-44zf-1dw7-qkf5 |
|
| 3 |
| vulnerability |
VCID-4zvp-nmrk-4qbq |
|
| 4 |
| vulnerability |
VCID-5snb-dyv3-efe9 |
|
| 5 |
| vulnerability |
VCID-5xhb-mx3v-fuhs |
|
| 6 |
| vulnerability |
VCID-61ry-zz34-8qhj |
|
| 7 |
| vulnerability |
VCID-657g-68tv-dkam |
|
| 8 |
| vulnerability |
VCID-7trf-g8dq-tua1 |
|
| 9 |
| vulnerability |
VCID-dr5e-6s1a-6uas |
|
| 10 |
| vulnerability |
VCID-ey6g-spfk-7bcw |
|
| 11 |
| vulnerability |
VCID-f1da-1duc-2uhb |
|
| 12 |
| vulnerability |
VCID-hufb-p6pa-63c9 |
|
| 13 |
| vulnerability |
VCID-j3ts-5ghc-4qct |
|
| 14 |
| vulnerability |
VCID-k5wq-xvyj-a7bq |
|
| 15 |
| vulnerability |
VCID-m2a7-q28u-1yfw |
|
| 16 |
| vulnerability |
VCID-wby4-h9ud-1yh5 |
|
| 17 |
| vulnerability |
VCID-yby1-g45r-rugg |
|
| 18 |
| vulnerability |
VCID-ykj6-ptd4-7qfs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.1 |
|
| 6 |
| url |
pkg:composer/moodle/moodle@5.0.2 |
| purl |
pkg:composer/moodle/moodle@5.0.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1efm-18zh-w7gm |
|
| 1 |
| vulnerability |
VCID-3m96-nmxm-tfgz |
|
| 2 |
| vulnerability |
VCID-44zf-1dw7-qkf5 |
|
| 3 |
| vulnerability |
VCID-4zvp-nmrk-4qbq |
|
| 4 |
| vulnerability |
VCID-5snb-dyv3-efe9 |
|
| 5 |
| vulnerability |
VCID-5xhb-mx3v-fuhs |
|
| 6 |
| vulnerability |
VCID-61ry-zz34-8qhj |
|
| 7 |
| vulnerability |
VCID-657g-68tv-dkam |
|
| 8 |
| vulnerability |
VCID-7trf-g8dq-tua1 |
|
| 9 |
| vulnerability |
VCID-dr5e-6s1a-6uas |
|
| 10 |
| vulnerability |
VCID-ey6g-spfk-7bcw |
|
| 11 |
| vulnerability |
VCID-f1da-1duc-2uhb |
|
| 12 |
| vulnerability |
VCID-hufb-p6pa-63c9 |
|
| 13 |
| vulnerability |
VCID-j3ts-5ghc-4qct |
|
| 14 |
| vulnerability |
VCID-k5wq-xvyj-a7bq |
|
| 15 |
| vulnerability |
VCID-m2a7-q28u-1yfw |
|
| 16 |
| vulnerability |
VCID-wby4-h9ud-1yh5 |
|
| 17 |
| vulnerability |
VCID-yby1-g45r-rugg |
|
| 18 |
| vulnerability |
VCID-ykj6-ptd4-7qfs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.2 |
|
|
| References |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-62393 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15711 |
| published_at |
2026-06-08T12:55:00Z |
|
| 1 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15796 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15837 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15729 |
| published_at |
2026-06-09T12:55:00Z |
|
| 4 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15847 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-62393 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| Weaknesses |
| 0 |
| cwe_id |
284 |
| name |
Improper Access Control |
| description |
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
|
| 1 |
| cwe_id |
937 |
| name |
OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013. |
|
| 2 |
| cwe_id |
1035 |
| name |
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017. |
|
|
| Exploits |
|
| Severity_range_score | 4.0 - 6.9 |
| Exploitability | 0.5 |
| Weighted_severity | 6.2 |
| Risk_score | 3.1 |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-k5wq-xvyj-a7bq |