2 lines
2.9 KiB
JSON
2 lines
2.9 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://git.moodle.org","defaultStatus":"unaffected","packageName":"moodle","versions":[{"lessThan":"4.5.4","status":"affected","version":"4.5.0","versionType":"semver"},{"lessThan":"4.4.8","status":"affected","version":"4.4.0","versionType":"semver"},{"lessThan":"4.3.12","status":"affected","version":"4.3.0","versionType":"semver"}]}],"source":"patrick@puiterwijk.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","matchCriteriaId":"BF438B80-5736-46ED-897E-726B563F8E0A","versionEndExcluding":"4.3.12","versionStartIncluding":"4.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","matchCriteriaId":"E758F51B-ADBF-406E-92A8-98090BE83C2B","versionEndExcluding":"4.4.8","versionStartIncluding":"4.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","matchCriteriaId":"F12B5C6F-A83C-488C-9C26-3C9A61F93618","versionEndExcluding":"4.5.4","versionStartIncluding":"4.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA)."},{"lang":"es","value":"Se descubrió una vulnerabilidad de seguridad en Moodle que puede permitir a los piratas informáticos obtener acceso a información confidencial sobre los estudiantes y evitar que inicien sesión en sus cuentas, incluso después de haber completado la autenticación de dos factores (2FA)."}],"id":"CVE-2025-3625","lastModified":"2026-06-17T09:20:20.627","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"patrick@puiterwijk.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3625","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-04-25T15:43:21.330868Z","version":"2.0.3"}}]},"published":"2025-04-25T15:15:36.753","references":[{"source":"patrick@puiterwijk.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2025-3625"},{"source":"patrick@puiterwijk.org","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359690"}],"sourceIdentifier":"patrick@puiterwijk.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"patrick@puiterwijk.org","type":"Secondary"}]}
|