Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-wxvp-8q8h-r6rr
Advisory ID github_osv/GHSA-wxvp-8q8h-r6rr
Aliases CVE-2011-4293
Summary Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-379 Creation of Temporary File in Directory with Insecure Permissions
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git;a=commit;h=e1c2a211f259821910be2cba23679d4176fb00a3
http://moodle.org/mod/forum/discuss.php?d=182736
http://openwall.com/lists/oss-security/2011/11/14/1
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/05f4555422278190ec24a88466ac43c914a7e5d6
https://github.com/moodle/moodle/commit/9a380fbb53429713b3c422a3146456dc97205329
https://github.com/moodle/moodle/commit/e1c2a211f259821910be2cba23679d4176fb00a3
CVE-2011-4293 https://nvd.nist.gov/vuln/detail/CVE-2011-4293
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.