CVE-2011-4293: Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory
Other sources
The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/moodle/moodleto a version that resolves this vulnerability.Fixed in 2.1.1 - Upgrade
Upgrade
composer/moodle/moodleto a version that resolves this vulnerability.Fixed in 2.0.4 - Upgrade
Upgrade
Moodleto a version that resolves this vulnerability.Fixed in 2.0.4 - Upgrade
Upgrade
Moodleto a version that resolves this vulnerability.Fixed in 2.1.1
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4293?
CVE-2011-4293 has a severity rating that suggests it can lead to unauthorized access and potential data integrity issues.
How do I fix CVE-2011-4293?
To remediate CVE-2011-4293, upgrade Moodle to version 2.0.4 or later, or 2.1.1 or later.
Which versions of Moodle are affected by CVE-2011-4293?
CVE-2011-4293 affects Moodle versions 2.0.x before 2.0.4 and 2.1.x before 2.1.1.
Can CVE-2011-4293 be exploited remotely?
Yes, CVE-2011-4293 allows remote attackers to bypass intended access restrictions.
What type of content does CVE-2011-4293 affect?
CVE-2011-4293 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content.