Search for vulnerabilities
| Vulnerability ID | VCID-yrg3-h8dt-nffv |
| Aliases |
CVE-2011-4133
GHSA-7cvw-wrj9-q5fp |
| Summary | Moodle vulnerable to Cross-Site Request Forgery Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 6.2 |
| Risk | 3.1 |
| Affected and Fixed Packages | Package Details |
| System | Score | Found at |
|---|---|---|
| generic_textual | MODERATE | http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f031d5431c1204197b1482fd6c63bc87a19a476 |
| generic_textual | MODERATE | http://git.moodle.org/gw?p=moodle.git;a=commit;h=8f031d5431c1204197b1482fd6c63bc87a19a476 |
| generic_textual | MODERATE | http://moodle.org/mod/forum/discuss.php?d=170002 |
| generic_textual | MODERATE | http://openwall.com/lists/oss-security/2011/11/14/1 |
| epss | 0.00126 | https://api.first.org/data/v1/epss?cve=CVE-2011-4133 |
| epss | 0.00126 | https://api.first.org/data/v1/epss?cve=CVE-2011-4133 |
| cvssv3.1_qr | MODERATE | https://github.com/advisories/GHSA-7cvw-wrj9-q5fp |
| generic_textual | MODERATE | https://github.com/moodle/moodle |
| generic_textual | MODERATE | https://nvd.nist.gov/vuln/detail/CVE-2011-4133 |
| Percentile | 0.32906 |
| EPSS Score | 0.00126 |
| Published At | June 30, 2025, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2025-07-01T12:30:17.017025+00:00 | GithubOSV Importer | Import | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-7cvw-wrj9-q5fp/GHSA-7cvw-wrj9-q5fp.json | 36.1.3 |