CVE-2011-4133: CSRF
Published Jul 16, 2012
·Updated
Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.
Affected Software
11 affected componentsFixes available
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
composer/moodle/moodle>=1.9.0<1.9.11
1.9.11
Event History
Jul 16, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:28 AM
DescriptionSeverityWeaknessAffected Software
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4133?
CVE-2011-4133 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site request forgery.
2
How do I fix CVE-2011-4133?
To fix CVE-2011-4133, you should upgrade to Moodle version 1.9.11 or later where the vulnerability has been patched.
3
What versions of Moodle are affected by CVE-2011-4133?
CVE-2011-4133 affects Moodle versions 1.9.1 through 1.9.10.
4
What type of attack does CVE-2011-4133 involve?
CVE-2011-4133 involves a cross-site request forgery (CSRF) attack that can hijack user authentication.
5
Who is at risk from CVE-2011-4133?
Users of vulnerable Moodle installations, particularly those who modify RSS feeds, are at risk from CVE-2011-4133.