CVE-2025-62397
Moodle: router produces json instead of 404 error for invalid course id
Résumé
Moodle: router produces json instead of 404 error for invalid course id
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.3"}]}]
Références
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org