Input validation error in Moodle - CVE-2011-4582
Published: July 20, 2012 / Updated: August 11, 2020
Vulnerability identifier: #VU43832
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-4582
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to read and manipulate data.
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
Affected software
Moodle
Fedora
moodle
Fedora
moodle
How to mitigate CVE-2011-4582
Install update from vendor's website.
moodle - update to 2.1.3-1.el6