CVE-2011-4293

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-07-16 · updated 2026-06-16
Weakness: CWE-264

Description

The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.

Affected products

Moodle: 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0

References

http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e1c2a211f259821910be2cba23679d4176fb00a3
http://moodle.org/mod/forum/discuss.php?d=182736
http://openwall.com/lists/oss-security/2011/11/14/1
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e1c2a211f259821910be2cba23679d4176fb00a3
http://moodle.org/mod/forum/discuss.php?d=182736
http://openwall.com/lists/oss-security/2011/11/14/1

Get alerted when CVE-2011-4293 or the next vulnerability affects your stack