CVE-2011-4293: Medium severity moodle vulnerability

Q: What is the severity of CVE-2011-4293?

CVE-2011-4293 has a severity rating that suggests it can lead to unauthorized access and potential data integrity issues.

Q: How do I fix CVE-2011-4293?

To remediate CVE-2011-4293, upgrade Moodle to version 2.0.4 or later, or 2.1.1 or later.

Q: Which versions of Moodle are affected by CVE-2011-4293?

CVE-2011-4293 affects Moodle versions 2.0.x before 2.0.4 and 2.1.x before 2.1.1.

Q: Can CVE-2011-4293 be exploited remotely?

Yes, CVE-2011-4293 allows remote attackers to bypass intended access restrictions.

Q: What type of content does CVE-2011-4293 affect?

CVE-2011-4293 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content.

Published Jul 16, 2012

Updated

The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.

Affected Software

7 affected componentsFixes available

composer/moodle/moodle>=2.1<2.1.1

2.1.1

composer/moodle/moodle>=2.0<2.0.4

2.0.4

Moodle moodle=2.0.0

Moodle moodle=2.0.1

Moodle moodle=2.0.2

Moodle moodle=2.0.3

Moodle moodle=2.1.0

Remediation

Patch Available

http://git.moodle.org/gw?p=moodle.git;a=commit;h=e1c2a211f259821910be2cba23679d4176fb00a3

Event History

Jul 16, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

May 13, 2022

Advisory Published

via GitHub·01:13 AM

Frequently Asked Questions

What is the severity of CVE-2011-4293?

CVE-2011-4293 has a severity rating that suggests it can lead to unauthorized access and potential data integrity issues.

How do I fix CVE-2011-4293?