Description

Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

Remediation

References

CVE-2011-4133

Related Vulnerabilities

WordPress Plugin GD Mail Queue Cross-Site Scripting (3.9.3)

WordPress Plugin Order Export & Order Import for WooCommerce Information Disclosure (1.0.8)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-3327)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)

XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16683)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2011-4133