{"action":"Upgrade moodle/moodle to 4.4.11 or later.","affected":[{"fixed":"5.0.3","introduced":"5.0.0-beta"},{"fixed":"4.5.7","introduced":"4.5.0-beta"},{"fixed":"4.4.11","introduced":"4.4.0-beta"}],"component":"moodle/moodle","cve_ids":["CVE-2025-62398"],"ecosystem":"Packagist","epss":0.00246,"exploited":false,"fixed_versions":["5.0.3","4.5.7","4.4.11"],"ghsa_id":"GHSA-25wf-7x6c-wmpf","id":"tcs_01M5KERK31SRYA9ERXC93YVTPF","modified_at":"2025-11-18T00:27:49.448266Z","published_at":"2025-10-23T12:31:17Z","references":["https://osv.dev/vulnerability/GHSA-25wf-7x6c-wmpf","https://nvd.nist.gov/vuln/detail/CVE-2025-62398","https://github.com/moodle/moodle/commit/67005f8b2098096f4c7ca4f78ab9ce69415d703b","https://github.com/moodle/moodle/commit/a2078f781ae065ca1f781bd159c7615c84afcaa5","https://access.redhat.com/security/cve/CVE-2025-62398","https://bugzilla.redhat.com/show_bug.cgi?id=2404431","https://github.com/moodle/moodle","https://moodle.org/mod/forum/discuss.php?d=470387"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-25wf-7x6c-wmpf","url":"https://osv.dev/vulnerability/GHSA-25wf-7x6c-wmpf"}],"summary":"Moodle does not properly enforce MFA"}