← Back

CVE-2011-4300

nvd nist
Published: Jul 11, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.

Affected (7)

Products: Moodle: Moodle
1 product
Moodle
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Version 2.0.0
Version 2.0.1
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.1.0
Version 2.1.1

Related CWEs

References (6)

Timeline

No history available yet.