Lucene search

RedhatCVE-2012-6101

HistoryJan 27, 2013 - 10:55 p.m.

CVE-2012-6101

2013-01-2722:55:03

CWE-20

redhat

web.nvd.nist.gov

moodle

open redirect

vulnerability

remote attackers

phishing

cve-2012-6101

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

64.8%

JSON

Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.

Affected configurations

Nvd

Node

moodlemoodleMatch2.2.0

moodlemoodleMatch2.2.1

moodlemoodleMatch2.2.2

moodlemoodleMatch2.2.3

moodlemoodleMatch2.2.4

moodlemoodleMatch2.2.5

moodlemoodleMatch2.2.6

Node

moodlemoodleMatch2.3.0

moodlemoodleMatch2.3.1

moodlemoodleMatch2.3.2

moodlemoodleMatch2.3.3

Node

moodlemoodleMatch2.4.0

VendorProductVersionCPE
moodlemoodle2.2.0cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*
moodlemoodle2.2.1cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:*
moodlemoodle2.2.2cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:*
moodlemoodle2.2.3cpe:2.3:a:moodle:moodle:2.2.3:*:*:*:*:*:*:*
moodlemoodle2.2.4cpe:2.3:a:moodle:moodle:2.2.4:*:*:*:*:*:*:*
moodlemoodle2.2.5cpe:2.3:a:moodle:moodle:2.2.5:*:*:*:*:*:*:*
moodlemoodle2.2.6cpe:2.3:a:moodle:moodle:2.2.6:*:*:*:*:*:*:*
moodlemoodle2.3.0cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:*
moodlemoodle2.3.1cpe:2.3:a:moodle:moodle:2.3.1:*:*:*:*:*:*:*
moodlemoodle2.3.2cpe:2.3:a:moodle:moodle:2.3.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moodle	moodle	2.2.0	cpe:2.3:a:moodle:moodle:2.2.0:::::::*
moodle	moodle	2.2.1	cpe:2.3:a:moodle:moodle:2.2.1:::::::*
moodle	moodle	2.2.2	cpe:2.3:a:moodle:moodle:2.2.2:::::::*
moodle	moodle	2.2.3	cpe:2.3:a:moodle:moodle:2.2.3:::::::*
moodle	moodle	2.2.4	cpe:2.3:a:moodle:moodle:2.2.4:::::::*
moodle	moodle	2.2.5	cpe:2.3:a:moodle:moodle:2.2.5:::::::*
moodle	moodle	2.2.6	cpe:2.3:a:moodle:moodle:2.2.6:::::::*
moodle	moodle	2.3.0	cpe:2.3:a:moodle:moodle:2.3.0:::::::*
moodle	moodle	2.3.1	cpe:2.3:a:moodle:moodle:2.3.1:::::::*
moodle	moodle	2.3.2	cpe:2.3:a:moodle:moodle:2.3.2:::::::*