GitHub Advisoryadvisory · Packagist

GHSA-jcrj-x36p-h9f6 Moodle Open Redirect in Calendar Set Page

MEDIUM Published 2022-05-13 Modified 2024-01-17 Official page ↗
Aliases
CVE-2011-4582
Ecosystem
Packagist
Packages
moodle/moodle
Severity
Moderate
Weaknesses
CWE-601
Reviewed
2024-01-17

Affected packages

• Packagist moodle/moodle: >= 2.1, < 2.1.3 → fixed in 2.1.3

Description

Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.

Related

Alias · CVE (1)

  • CVE-2011-4582 Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References