VULNERABILITY INTELLIGENCE

CVE-2011-4300

CVSS score5 MEDIUM
EPSS probability2.12%
CISA KEVNot currently listed
Published2012-07-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.

Primary references