Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-4582

Good to know:

icon

Date: July 20, 2012

Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.

Language: PHP

Severity Score

Related Resources (10)

https://github.com/moodle/moodle/commit/eb59a448f7879d69b21fcde7f1fcddd69655e045
https://bugzilla.redhat.com/show_bug.cgi?id=761248
https://github.com/moodle/moodle
https://nvd.nist.gov/vuln/detail/CVE-2011-4582
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28720&sr=1
https://github.com/moodle/moodle/commit/0d2672748c00181d9cdae2aabbab916cbd64c47d
https://github.com/moodle/moodle/commit/21e7d4c5fc9cc5df54c9c7d82190f1339d163a9e
https://github.com/moodle/moodle/commit/7f422374c101dcb0affdd5127b855671af4f3748
http://moodle.org/mod/forum/discuss.php?d=191748
https://www.mend.io/vulnerability-database/CVE-2011-4582

Severity Score

Weakness Type (CWE)

Input Validation

CWE-20

URL Redirection to Untrusted Site ('Open Redirect')

CWE-601

Top Fix

icon

Upgrade Version

Upgrade to version v2.1.3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): SINGLE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us