CVE-2011-4582: Moodle Open Redirect in Calendar Set Page
Moodle Open Redirect in Calendar Set Page
Other sources
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/moodle/moodleto a version that resolves this vulnerability.Fixed in 2.1.3
Event History
Frequently Asked Questions
What is the vulnerability CVE-2011-4582?
CVE-2011-4582 is an open redirect vulnerability in Moodle 2.1.x versions before 2.1.3 that allows authenticated users to redirect others to arbitrary websites.
What versions of Moodle are affected by CVE-2011-4582?
CVE-2011-4582 affects Moodle versions 2.1.0, 2.1.1, and 2.1.2 before the fix in version 2.1.3.
How can I fix the issue identified in CVE-2011-4582?
To fix CVE-2011-4582, upgrade Moodle to version 2.1.3 or later.
What types of attacks can be conducted using CVE-2011-4582?
CVE-2011-4582 can be exploited to conduct phishing attacks by redirecting users to malicious websites.
Who can exploit the vulnerability CVE-2011-4582?
CVE-2011-4582 can be exploited by remote authenticated users who have access to the Calendar set page in Moodle.