CVE-2011-4281

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-4281
Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://moodle.org/mod/forum/discuss.php?d=170006 Vendor Advisory
http://openwall.com/lists/oss-security/2011/11/14/1
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*
History

07 Nov 2023, 02:09

Type Values Removed Values Added
References
  • {'url': 'http://git.moodle.org/gw?p=moodle.git;a=commit;h=9cedb80c5d6318aa17cd66912d37e6ef3dca9455', 'name': 'http://git.moodle.org/gw?p=moodle.git;a=commit;h=9cedb80c5d6318aa17cd66912d37e6ef3dca9455', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • () http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455 -
Information

Published : 2012-07-16 10:28

Updated : 2023-11-07 02:09

NVD link : CVE-2011-4281

Mitre link : CVE-2011-4281

JSON object : View

Products Affected

moodle

  • moodle
CWE
CWE-352

Cross-Site Request Forgery (CSRF)