medium5.3
CVE-2025-62397
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
Impact
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | from 5.0.0 before 5.0.3 |