Self-enrollment Flaw in Moodle by Moodle HQ

CVE-2025-3634

What is CVE-2025-3634?

A significant security flaw has been identified in Moodle that allows users to enroll in courses without completing all required safety measures. This issue results in premature course sign-ups, bypassing the essential two-step verification process that ensures proper authentication. Such vulnerabilities can lead to unauthorized access and a lack of secure user verification, highlighting the need for immediate attention and remediation.

References