CVE-2011-4582: Input Validation
Published Jul 20, 2012
·Updated
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
Affected Software
4 affected componentsFixes available
composer/moodle/moodle>=2.1<2.1.3
2.1.3
Moodle moodle=2.1.2
Moodle moodle=2.1.1
Moodle moodle=2.1.0
Remediation
Patch Available
Event History
Jul 20, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the vulnerability CVE-2011-4582?
CVE-2011-4582 is an open redirect vulnerability in Moodle 2.1.x versions before 2.1.3 that allows authenticated users to redirect others to arbitrary websites.
2
What versions of Moodle are affected by CVE-2011-4582?
CVE-2011-4582 affects Moodle versions 2.1.0, 2.1.1, and 2.1.2 before the fix in version 2.1.3.
3
How can I fix the issue identified in CVE-2011-4582?
To fix CVE-2011-4582, upgrade Moodle to version 2.1.3 or later.
4
What types of attacks can be conducted using CVE-2011-4582?
CVE-2011-4582 can be exploited to conduct phishing attacks by redirecting users to malicious websites.
5
Who can exploit the vulnerability CVE-2011-4582?
CVE-2011-4582 can be exploited by remote authenticated users who have access to the Calendar set page in Moodle.