PT-2012-1841 · Moodle · Moodle

Matthew Davidson · Published 2012-07-16 · Updated 2022-05-13 · CVE-2011-4293

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.3 Moodle versions 2.1.x through 2.1.0

Description The issue allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory. This is due to the theme implementation triggering duplicate caching of Cascading Style Sheets (CSS) and JavaScript content.

Recommendations For Moodle versions 2.0.x through 2.0.3, update to version 2.0.4 or later. For Moodle versions 2.1.x through 2.1.0, update to version 2.1.1 or later.

Fix

Weakness Enumeration

CWE-264

CWE-379

Related Identifiers

CVE-2011-4293

GHSA-WXVP-8Q8H-R6RR

Affected Products

Moodle

References · 10

• https://osv.dev/vulnerability/GHSA-wxvp-8q8h-r6rr · Vendor Advisory
• http://moodle.org/mod/forum/discuss.php?d=182736 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4293 · Security Note
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/05f4555422278190ec24a88466ac43c914a7e5d6 · Note
• https://github.com/moodle/moodle/commit/e1c2a211f259821910be2cba23679d4176fb00a3 · Note
• https://github.com/moodle/moodle/commit/9a380fbb53429713b3c422a3146456dc97205329 · Note
• http://git.moodle.org/gw?p=moodle.git;a=commit;h=e1c2a211f259821910be2cba23679d4176fb00a3 · Note
• http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e1c2a211f259821910be2cba23679d4176fb00a3 · Note
• http://openwall.com/lists/oss-security/2011/11/14/1 · Note