GHSA-7cvw-wrj9-q5fpMedium

Moodle vulnerable to Cross-Site Request Forgery

Published
May 13, 2022
Last Modified
April 12, 2025

🔗 CVE IDs covered (1)

CVE-2011-4133 →

📋 Description

Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

🎯 Affected products1

  • composer/moodle/moodle:>= 1.9.0, < 1.9.11

🔗 References (6)