CVE-2011-4291: Input Validation
Published Jul 16, 2012
·Updated
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations.
Affected Software
4 affected componentsFixes available
Moodle moodle=2.0.2
Moodle moodle=2.0.1
Moodle moodle=2.0.0
composer/moodle/moodle>=2.0.0<2.0.3
2.0.3
Remediation
Event History
Jul 16, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:28 AM
DescriptionSeverityAffected Software
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4291?
CVE-2011-4291 has a medium severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2011-4291?
To fix CVE-2011-4291, upgrade your Moodle installation to version 2.0.3 or later.
3
Who is affected by CVE-2011-4291?
CVE-2011-4291 affects users of Moodle versions 2.0.0, 2.0.1, and 2.0.2.
4
What type of attack does CVE-2011-4291 facilitate?
CVE-2011-4291 facilitates a denial of service attack through crafted ratings operations.
5
Can CVE-2011-4291 be exploited by unauthenticated users?
No, CVE-2011-4291 can only be exploited by remote authenticated users.