Description

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.

Remediation

References

CVE-2025-62399

Related Vulnerabilities

WordPress Plugin Knews Multilingual Newsletters SQL Injection (1.7.0)

WordPress Plugin Power Charts-Responsive Beautiful Charts & Graphs Cross-Site Scripting (0.1.0)

WordPress Plugin Active Directory Authentication Integration Cross-Site Scripting (0.6)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1297)

WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk SQL Injection (5.148)

Severity

High

Classification

CVE-2025-62399 CWE-307 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities