Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2011-4297

Опубликовано: 16 июл. 2012
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 6.4

Описание

comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity.

РелизСтатусПримечание
devel

not-affected

1.9.9.dfsg2-4
hardy

ignored

end of life
lucid

not-affected

maverick

not-affected

natty

not-affected

oneiric

not-affected

upstream

needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 66%
0.00519
Низкий

6.4 Medium

CVSS2

Связанные уязвимости

nvd
почти 13 лет назад

comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity.

debian
почти 13 лет назад

comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 do ...

github
около 3 лет назад

Moodle does not properly restrict comment capabilities

EPSS

Процентиль: 66%
0.00519
Низкий

6.4 Medium

CVSS2