medium5.4
CVE-2025-62401
Moodle has a time restriction bypass
Impact
An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | moodle/moodle | >= 5.0.0-beta, < 5.0.3 | 5.0.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | from 4.1.0 before 4.1.21 from 4.4.0 before 4.4.11 from 4.5.0 before 4.5.7 from 5.0.0 before 5.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://access.redhat.com/security/cve/CVE-2025-62401
- https://bugzilla.redhat.com/show_bug.cgi?id=2404434
- https://github.com/advisories/GHSA-w29j-8phw-ffjf
- https://nvd.nist.gov/vuln/detail/CVE-2025-62401
- https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb
- https://moodle.org/mod/forum/discuss.php?d=470390