CVE-2025-62401CWE-285

Moodle: possible to bypass timer in timed assignments

Medium · published October 23, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Weakness
CWE-285 · Improper Authorization
Published
2025-10-23T11:29Z
EPSS history
Timeline
  • 23 OCT 11:29Z
    Moodle: possible to bypass timer in timed assignments
    cvelistv5