CVEvulnerability
CVE-2011-4293
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-264
Description
The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.
Affected configurations
• moodle moodle 2.0.0
• moodle moodle 2.0.1
• moodle moodle 2.0.2
• moodle moodle 2.0.3
• moodle moodle 2.1.0
Related
Weakness · not in database (1)
References
- http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e1c2a211f259821910be2cba23679d4176fb00a3 git.moodle.org
- http://moodle.org/mod/forum/discuss.php?d=182736 Vendor Advisory
- http://openwall.com/lists/oss-security/2011/11/14/1 openwall.com
- http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e1c2a211f259821910be2cba23679d4176fb00a3 git.moodle.org
- http://moodle.org/mod/forum/discuss.php?d=182736 Vendor Advisory
- http://openwall.com/lists/oss-security/2011/11/14/1 openwall.com