CVE-2011-4203

2022-10-0316:15:13

mitre

www.cve.org

crlf injection

moodle calendar

http response splitting

cve-2011-4203

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

57.7%

JSON

CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.