Medium
Moodle: hidden group names visible to event creators
Type: advisorySources: OSV
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-62400
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 13:44 UTC · Revision 1
Source evidence
Moodle: hidden group names visible to event creators
core-osv · Original sourcePublished 23 Oct 2025, 11:28 UTC
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
osv:CVE-2025-62400
Complete source record
{
"id": "ffb8bc3b46200500f4bed4e1b89adc0b7dac72799c7c39b52cc090971dd8b3cd",
"url": "https://osv.dev/vulnerability/CVE-2025-62400",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Moodle: hidden group names visible to event creators",
"summary": "Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.",
"evidence": "osv:CVE-2025-62400",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2025-62400",
"aliases": [
"BIT-moodle-2025-62400",
"CVE-2025-62400",
"GHSA-422v-w6c5-vq42"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/moodle/moodle",
"type": "GIT",
"events": [
{
"introduced": "0ea3d45e04c3d54a3a472ddcb11606b30e227c50"
},
{
"fixed": "239be346a1083b42dff734114580f486e763f25f"
},
{
"introduced": "ee91c6536f99e1633e2245780c4fe7f47340ed66"
},
{
"fixed": "381b66b33a9b5f255d31f4508f26ad7c1a9af154"
},
{
"introduced": "52c0da7c647bd6ba8c5f61882d88959821a1fb41"
},
{
"fixed": "d1321ff0d53b1be617ccba1d0167fc30b539901c"
},
{
"introduced": "78e860178314c45441a21e0b99455400b8283d48"
},
{
"fixed": "1b2d270397613a3889a24f59be0ee6d0292a7556"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1.0"
},
{
"fixed": "4.1.21"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.0"
},
{
"fixed": "4.4.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.5.0"
},
{
"fixed": "4.5.7"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.0.3"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v4.1.20",
"v4.4.10",
"v4.5.6",
"v5.0.2",
"v4.5.5",
"v5.0.1",
"v4.1.19",
"v4.4.9",
"v4.1.18",
"v5.0.0",
"v4.5.4",
"v4.4.8",
"v4.5.3",
"v4.4.7",
"v4.1.17",
"v4.5.2",
"v4.4.6",
"v4.1.16",
"v4.5.1",
"v4.4.5",
"v4.1.15",
"v4.5.0",
"v4.4.4",
"v4.1.14",
"v4.1.13",
"v4.4.3",
"v4.4.2",
"v4.1.12",
"v4.4.1",
"v4.1.11",
"v4.1.10",
"v4.4.0",
"v4.1.9",
"v4.1.8",
"v4.1.7",
"v4.1.6",
"v4.1.5",
"v4.1.4",
"v4.1.3",
"v4.1.2",
"v4.1.1",
"v4.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62400.json"
}
}
],
"modified": "2026-10-28T02:30:50.835678761Z",
"provider": "osv",
"references": [
"https://git.moodle.org",
"https://access.redhat.com/security/cve/CVE-2025-62400",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62400.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-62400",
"https://bugzilla.redhat.com/show_bug.cgi?id=2404433"
],
"provider_metadata": {
"cwe_ids": [
"CWE-200"
],
"cna_assigner": "fedora",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.0.3"
},
{
"introduced": "4.5.0"
},
{
"fixed": "4.5.7"
},
{
"introduced": "4.4.0"
},
{
"fixed": "4.4.11"
},
{
"introduced": "4.1.0"
},
{
"fixed": "4.1.21"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62400.json"
}
},
"related_cves": [
{
"value": "CVE-2025-62400",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 519506,
"published_at": "2025-10-23T11:28:43.89+00:00"
}