#VU124630 Improper Restriction of Excessive Authentication Attempts in Moodle - CVE-2025-67853

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU124630

#VU124630 Improper Restriction of Excessive Authentication Attempts in Moodle - CVE-2025-67853

Published: March 26, 2026


Vulnerability identifier: #VU124630
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2025-67853
CWE-ID: CWE-307
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Moodle
Software vendor:
moodle.org

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to the affected application does not limit the number of password attempts within confirmation email web service. A remote attacker can brute force password checks on the target system.


Remediation

Install updates from vendor's website.

External links