Miembros de
Boletines de Vulnerabilidades |
MSA-25-0014: User DoS and name disclosure risks via IDOR in MFA email factor revoke action |
|
| Software afectado | PHP |
|
by Michael Hawkins. A missing check in the Multi-Factor Authentication email factors revoke/cancel action could lead to a Denial of Service risk for users logging in who have email as their only available second factor. If exploited, the impacted users name was disclosed.Severity/Risk:SeriousVersions affected:4.5 to 4.5.3, 4.4 to 4.4.7 and 4.3 to 4.3.11Versions fixed:4.5.4, 4.4.8 and 4.3.12Reported by:vi22CVE identifier:CVE-2025-3625Changes More info: https://moodle.org/mod/forum/discuss.php?d=467593&parent=1877212 |
|
