Description

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

Remediation

References

CVE-2025-62393

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Quick View Security Bypass (1.3.13)

MySQL Other Vulnerability (CVE-2007-6303)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-35653)

WordPress Plugin Integration for Contact Form 7 and Constant Contact Cross-Site Scripting (1.0.8)

SharePoint Relative Path Traversal Vulnerability (CVE-2026-62837)

Severity

Medium

Classification

CVE-2025-62393 CWE-284 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities