CVE-2025-62400
Moodle: hidden group names visible to event creators
Summary
Moodle: hidden group names visible to event creators
Original description
The description as published by the source.
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.21"},{"introduced":"4.4.0"},{"fixed":"4.4.11"},{"introduced":"4.5.0"},{"fixed":"4.5.7"},{"introduced":"5.0.0"},{"fixed":"5.0.3"}]}]
References
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org