VulnerableCode Advisory Details - GHSA-jcrj-x36p-h9f6

Staging Environment: Content and features may be unstable or change without notice.

Advisory details: github_osv / GHSA-jcrj-x36p-h9f6

Essentials
Severities (1)
References (9)
Exploits (0)
EPSS
Severity details (0)
Patches: (0)

Advisory ID	github_osv/GHSA-jcrj-x36p-h9f6
Aliases	CVE-2011-4582
Summary	Moodle Open Redirect in Calendar Set Page Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details

Weaknesses (1)

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

System	Score	Found at
generic_textual	MODERATE

Reference id	Reference type	URL
		http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28720&sr=1
		http://moodle.org/mod/forum/discuss.php?d=191748
		https://bugzilla.redhat.com/show_bug.cgi?id=761248
		https://github.com/moodle/moodle
		https://github.com/moodle/moodle/commit/0d2672748c00181d9cdae2aabbab916cbd64c47d
		https://github.com/moodle/moodle/commit/21e7d4c5fc9cc5df54c9c7d82190f1339d163a9e
		https://github.com/moodle/moodle/commit/7f422374c101dcb0affdd5127b855671af4f3748
		https://github.com/moodle/moodle/commit/eb59a448f7879d69b21fcde7f1fcddd69655e045
CVE-2011-4582		https://nvd.nist.gov/vuln/detail/CVE-2011-4582

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.