CVE-2025-62400CWE-200

Moodle: hidden group names visible to event creators

Medium · published October 23, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-23T11:28Z
EPSS history
Timeline
  • 23 OCT 11:28Z
    Moodle: hidden group names visible to event creators
    cvelistv5