UpHeron
All vulnerabilities

Servers and applications

CVE-2025-62396

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

Severity
Medium 5.3
Published
23 Oct 2025
Last changed
27 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.5.7, 5.0.3
Sources
NVD

Affected software

SoftwareAffected versions
MoodleServers and applications · cpe:a:moodle:moodle
  • From 4.5.0 before 4.5.7
  • From 5.0.0 before 5.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-62396
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-62396