Description

Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

Remediation

References

CVE-2011-4133

Related Vulnerabilities

Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2014-0118)

Drupal Core 8.8.x Information Disclosure (8.8.0 - 8.8.9)

WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.6.1)

Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1967)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-25727)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2011-4133