Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/15221?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15221?format=api", "vulnerability_id": "VCID-e1jc-m337-k7bj", "summary": "Moodle does not properly restrict access to category and course data\nThe file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.", "aliases": [ { "alias": "CVE-2011-4300" }, { "alias": "GHSA-9p54-pc88-36c4" } ], "fixed_packages": [], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/49933?format=api", "purl": "pkg:composer/moodle/moodle@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1m87-uyah-9kat" }, { "vulnerability": "VCID-364d-q9tm-4ket" }, { "vulnerability": "VCID-5u1f-df9m-x3en" }, { "vulnerability": "VCID-5vy6-nqht-hfa5" }, { "vulnerability": "VCID-7see-ex7a-9fdr" }, { "vulnerability": "VCID-8d1d-8x82-n7fj" }, { "vulnerability": "VCID-8q6b-cnmp-n3gv" }, { "vulnerability": "VCID-8y2x-aqub-9ycv" }, { "vulnerability": "VCID-9ffw-35y1-9kcc" }, { "vulnerability": "VCID-ajfk-n1qs-hqdp" }, { "vulnerability": "VCID-bav3-bmte-w3gr" }, { "vulnerability": "VCID-bgbv-4kb1-3bhg" }, { "vulnerability": "VCID-e1jc-m337-k7bj" }, { "vulnerability": "VCID-era2-gy4n-6kdx" }, { "vulnerability": "VCID-f6mk-8r56-1yfe" }, { "vulnerability": "VCID-j9xy-97ps-7fht" }, { "vulnerability": "VCID-kr6a-2jmv-t7dh" }, { "vulnerability": "VCID-pj1q-4uex-e3d3" }, { "vulnerability": "VCID-pmh4-7sf4-pkec" }, { "vulnerability": "VCID-pswr-m2yd-tkfb" }, { "vulnerability": "VCID-qpns-23xm-qyhv" }, { "vulnerability": "VCID-rqx8-nq76-sugw" }, { "vulnerability": "VCID-rsgm-pmc9-dfbb" }, { "vulnerability": "VCID-t242-kuj7-zfg4" }, { "vulnerability": "VCID-t5ww-gsnd-3ycg" }, { "vulnerability": "VCID-u9f3-sbjk-pygw" }, { "vulnerability": "VCID-ut3x-gmbz-ukem" }, { "vulnerability": "VCID-vf82-m9gw-kud2" }, { "vulnerability": "VCID-yrzk-x3uu-zkcn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/49935?format=api", "purl": "pkg:composer/moodle/moodle@2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1m87-uyah-9kat" }, { "vulnerability": "VCID-364d-q9tm-4ket" }, { "vulnerability": "VCID-5vy6-nqht-hfa5" }, { "vulnerability": "VCID-7see-ex7a-9fdr" }, { "vulnerability": "VCID-8q6b-cnmp-n3gv" }, { "vulnerability": "VCID-du8m-h228-cff3" }, { "vulnerability": "VCID-e1jc-m337-k7bj" }, { "vulnerability": "VCID-hxhr-sxkm-nka6" }, { "vulnerability": "VCID-kdqf-c5py-sybt" }, { "vulnerability": "VCID-pj1q-4uex-e3d3" }, { "vulnerability": "VCID-pswr-m2yd-tkfb" }, { "vulnerability": "VCID-qjdf-s39r-5bdb" }, { "vulnerability": "VCID-t242-kuj7-zfg4" }, { "vulnerability": "VCID-t5ww-gsnd-3ycg" }, { "vulnerability": "VCID-u9f3-sbjk-pygw" }, { "vulnerability": "VCID-uhws-64fm-hybk" }, { "vulnerability": "VCID-vf82-m9gw-kud2" }, { "vulnerability": "VCID-xu4e-svgd-cygq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.1.0" } ], "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f6b07c4da54a9db24723beb147e8a19a3d487e00", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f6b07c4da54a9db24723beb147e8a19a3d487e00" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git;a=commit;h=f6b07c4da54a9db24723beb147e8a19a3d487e00", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git;a=commit;h=f6b07c4da54a9db24723beb147e8a19a3d487e00" }, { "reference_url": "http://moodle.org/mod/forum/discuss.php?d=188311", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://moodle.org/mod/forum/discuss.php?d=188311" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4300", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49408", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49406", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49401", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.4942", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49392", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49395", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.4944", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49437", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49342", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.4937", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49398", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49351", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4300" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=747444", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=747444" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/6f7c43c7de8f62cd53a7f3b54ad5325cd109c1be", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/6f7c43c7de8f62cd53a7f3b54ad5325cd109c1be" }, { "reference_url": "https://github.com/moodle/moodle/commit/81c77993e3808bba68fe24d6bfbac19a41679a6f", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/81c77993e3808bba68fe24d6bfbac19a41679a6f" }, { "reference_url": "https://github.com/moodle/moodle/commit/f6b07c4da54a9db24723beb147e8a19a3d487e00", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f6b07c4da54a9db24723beb147e8a19a3d487e00" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4300", "reference_id": "CVE-2011-4300", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4300" }, { "reference_url": "https://github.com/advisories/GHSA-9p54-pc88-36c4", "reference_id": "GHSA-9p54-pc88-36c4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9p54-pc88-36c4" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 264, "name": "Permissions, Privileges, and Access Controls", "description": "Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 284, "name": "Improper Access Control", "description": "The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e1jc-m337-k7bj" }