ByteOS Network

NVD Vulnerability Details :

CVE-2011-4133

Modified

Source-secalert@redhat.com

Published At-16 Jul, 2012 | 10:28

Updated At-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-352	Primary	nvd@nist.gov

CWE ID: CWE-352

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f031d5431c1204197b1482fd6c63bc87a19a476	secalert@redhat.com	N/A
http://moodle.org/mod/forum/discuss.php?d=170002	secalert@redhat.com	Vendor Advisory
http://openwall.com/lists/oss-security/2011/11/14/1	secalert@redhat.com	N/A
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f031d5431c1204197b1482fd6c63bc87a19a476	af854a3a-2127-422b-91ae-364da2661108	N/A
http://moodle.org/mod/forum/discuss.php?d=170002	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://openwall.com/lists/oss-security/2011/11/14/1	af854a3a-2127-422b-91ae-364da2661108	N/A