Description

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.

Remediation

References

CVE-2025-62399

Related Vulnerabilities

WordPress Plugin Affiliate Ads for Clickbank Products Cross-Site Scripting (1.6)

Liferay DXP Origin Validation Error Vulnerability (CVE-2025-62250)

WordPress Plugin WP Header Images Cross-Site Scripting (2.0.0)

WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities (1.9.0)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17960)

Severity

High

Classification

CVE-2025-62399 CWE-307 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities