← All advisories

Medium severity5.3OSV Advisory· Published Oct 23, 2025· Updated Jun 17, 2026

CVE-2025-62397

CVE-2025-62397

Description

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Moodle/MoodleOSV2 versions
v5.0.0, v5.0.1, v5.0.2+ 1 more
- (no CPE)range: v5.0.0, v5.0.1, v5.0.2
- cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=5.0.0,<5.0.3
Red Hat/routerllm-create
osv-coords
pkg:bitnami/moodle
Range: >= 5.0.0, < 5.0.3

Patches

Vulnerability mechanics

References

2

access.redhat.com/security/cve/CVE-2025-62397nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.