CVE-2009-4297: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4297?
CVE-2009-4297 is classified as a medium to high severity vulnerability due to its potential to allow attackers to perform unauthorized actions on behalf of users.
How do I fix CVE-2009-4297?
To fix CVE-2009-4297, upgrade Moodle to version 1.8.11 or 1.9.7 or later, where the vulnerabilities have been patched.
Which versions of Moodle are affected by CVE-2009-4297?
CVE-2009-4297 affects Moodle versions 1.8 before 1.8.11 and 1.9 before 1.9.7.
What type of attack does CVE-2009-4297 involve?
CVE-2009-4297 involves multiple cross-site request forgery (CSRF) vulnerabilities that can be exploited to hijack user authentication.
Who can be impacted by CVE-2009-4297?
Users of affected versions of Moodle can be impacted if they fall victim to CSRF attacks conducted by remote attackers.