Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Moodle Improper Handling of Insufficient Permissions or Privileges Vulnerability - CVE-2025-67848 - Vulnerability Database
Moodle

Moodle Improper Handling of Insufficient Permissions or Privileges Vulnerability - CVE-2025-67848

High
Reference: CVE-2025-67848
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-67848
Title: Moodle Improper Handling of Insufficient Permissions or Privileges Vulnerability
Overview:

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user39s suspension status enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.