CVE-2011-4305: Medium severity moodle vulnerability
Published Jul 11, 2012
·Updated
message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshing.
Affected Software
13 affected components
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Moodle moodle=1.9.12
Moodle moodle=1.9.13
Remediation
Patch Available
Patch Available
Event History
Jul 11, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4305?
CVE-2011-4305 is considered to have a high severity due to its potential to cause a denial of service.
2
How do I fix CVE-2011-4305?
To fix CVE-2011-4305, upgrade to Moodle version 1.9.14 or later.
3
Which versions of Moodle are affected by CVE-2011-4305?
CVE-2011-4305 affects Moodle versions 1.9.1 to 1.9.13.
4
What type of vulnerability is CVE-2011-4305?
CVE-2011-4305 is a denial of service vulnerability.
5
Can CVE-2011-4305 be exploited by unauthenticated users?
No, CVE-2011-4305 requires remote authenticated users to exploit the vulnerability.