CVE-2025-62401

Source
https://cve.org/CVERecord?id=CVE-2025-62401
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62401.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-62401
Aliases
Downstream
Published
2025-10-23T11:29:32Z
Modified
2026-08-12T03:51:09Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
Summary
Moodle: possible to bypass timer in timed assignments
Details

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

Database specific
{
    "cna_assigner": "fedora",
    "cwe_ids": [
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62401.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.0.0"
                },
                {
                    "fixed": "5.0.3"
                },
                {
                    "introduced": "4.5.0"
                },
                {
                    "fixed": "4.5.7"
                },
                {
                    "introduced": "4.4.0"
                },
                {
                    "fixed": "4.4.11"
                },
                {
                    "introduced": "4.1.0"
                },
                {
                    "fixed": "4.1.21"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Type
GIT
Repo
https://github.com/moodle/moodle
Events
Database specific
Show details
{
    "cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.1.0"
        },
        {
            "fixed": "4.1.21"
        },
        {
            "introduced": "4.4.0"
        },
        {
            "fixed": "4.4.11"
        },
        {
            "introduced": "4.5.0"
        },
        {
            "fixed": "4.5.7"
        },
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "5.0.3"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v4.*
v4.1.0
v4.1.1
v4.1.10
v4.1.11
v4.1.12
v4.1.13
v4.1.14
v4.1.15
v4.1.16
v4.1.17
v4.1.18
v4.1.19
v4.1.2
v4.1.20
v4.1.3
v4.1.4
v4.1.5
v4.1.6
v4.1.7
v4.1.8
v4.1.9
v4.4.0
v4.4.1
v4.4.10
v4.4.2
v4.4.3
v4.4.4
v4.4.5
v4.4.6
v4.4.7
v4.4.8
v4.4.9
v4.5.0
v4.5.1
v4.5.2
v4.5.3
v4.5.4
v4.5.5
v4.5.6
v5.*
v5.0.0
v5.0.1
v5.0.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62401.json"