VULNERABILITY INTELLIGENCE
CVE-2011-4281
CVSS score6.8 MEDIUM
EPSS probability1.01%
CISA KEVNot currently listed
Published2012-07-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)