CVE-2025-62398

Moodle: possible to bypass mfa

概要

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"4.4.0"},{"fixed":"4.4.11"},{"introduced":"4.5.0"},{"fixed":"4.5.7"},{"introduced":"5.0.0"},{"fixed":"5.0.3"}]}]

参照URL

advisory access.redhat.com
advisory bugzilla.redhat.com
web nvd.nist.gov