CVE-2011-4133 | BDVDB-2026-50938 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://openwall.com/lists/oss-security/2011/11/14/1
http://moodle.org/mod/forum/discuss.php?d=170002
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f031d5431c1204197b1482fd6c63bc87a19a476

Exploit#

No public exploit known

History#

Version 12012-07-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.