CVE-2025-67848

HIGH

8.1

Descripcion

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.

Detalles CVE

Puntuacion CVSS v3.18.1

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado2/3/2026

Ultima modificacion2/11/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

moodle:moodle

Debilidades (CWE)

CWE-280

Referencias

https://access.redhat.com/security/cve/CVE-2025-67848(patrick@puiterwijk.org)

https://bugzilla.redhat.com/show_bug.cgi?id=2423831(patrick@puiterwijk.org)

https://moodle.org/mod/forum/discuss.php?d=471298(patrick@puiterwijk.org)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.