Advisory details:
ubuntu_osv / UBUNTU-CVE-2011-4203
| Advisory ID | ubuntu_osv/UBUNTU-CVE-2011-4203 |
| Aliases |
CVE-2011-4203
|
| Summary | CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 6.2 |
| Risk | 3.1 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| ubuntu-priority | medium | https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-4203.json |
| Reference id | Reference type | URL |
|---|---|---|
| https://ubuntu.com/security/CVE-2011-4203 | ||
| https://www.cve.org/CVERecord?id=CVE-2011-4203 |
No exploits are available.
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no known vectors.
There are no SSVC decisions available.