CVE-2011-4281

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.

References

http://openwall.com/lists/oss-security/2011/11/14/1

http://moodle.org/mod/forum/discuss.php?d=170006

http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3