Lucene search
HistoryJul 16, 2012 - 10:28 a.m.
CVE-2011-4133
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.5%
Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.
Affected configurations
Node
moodlemoodleMatch1.9.1
ORmoodlemoodleMatch1.9.2
ORmoodlemoodleMatch1.9.3
ORmoodlemoodleMatch1.9.4
ORmoodlemoodleMatch1.9.5
ORmoodlemoodleMatch1.9.6
ORmoodlemoodleMatch1.9.7
ORmoodlemoodleMatch1.9.8
ORmoodlemoodleMatch1.9.9
ORmoodlemoodleMatch1.9.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 1.9.1 | cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.2 | cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.3 | cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.4 | cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.5 | cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.6 | cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.7 | cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.8 | cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.9 | cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.10 | cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2011-4133
2012-07-16 00:00:00
prion
prion
Cross site request forgery (csrf)
2012-07-16 10:28:00
cvelist
cvelist
CVE-2011-4133
2012-07-16 10:00:00
cve
cve
CVE-2011-4133
2012-07-16 10:28:36
nessus
nessus
Moodle 1.9.x < 1.9.11 Multiple Vulnerabilities
2015-04-20 00:00:00
openvas
openvas
Debian Security Advisory DSA 2262-1 (moodle)
2011-08-03 00:00:00
Debian: Security Advisory (DSA-2262-1)
2011-08-03 00:00:00
Debian: Security Advisory (DSA-2262-1)
2011-08-03 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.5%
Related for NVD:CVE-2011-4133