Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4283)

Description

Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.

Remediation

References

CVE-2011-4283

Related Vulnerabilities

Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2021-43980)

WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Request Forgery (2.25.2)

Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-1111)

WordPress Plugin UserPro-Community and User Profile Security Bypass (4.9.17)

PostgreSQL Resource Management Errors Vulnerability (CVE-2007-4772)

Severity

Medium

Classification

CVE-2011-4283 CWE-200