{"id":"GHSA-8vjj-wf73-w882","aliases":["CVE-2011-4285"],"title":"Moodle Incorrect Default Settings","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the `moodle/course:delete` capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role.","severity":"medium","score":null,"published":"2022-05-13T01:13:17.000Z","modified":"2024-01-17T18:56:33.057Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-8vjj-wf73-w882","url":"https://osv.dev/vulnerability/GHSA-8vjj-wf73-w882"}],"ranges":[{"events":[{"introduced":"2.0"},{"fixed":"2.0.2"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.0.2"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-4285","https://github.com/moodle/moodle/commit/5dd7e903ff1698dcf2b6bbd821c31720d169fb83","https://github.com/moodle/moodle","http://git.moodle.org/gw?p=moodle.git;a=commit;h=5cfe8aecb8b78e343ded38ba9e7a0a859887d21c","http://moodle.org/mod/forum/discuss.php?d=170011","http://openwall.com/lists/oss-security/2011/11/14/1"],"sources":[{"name":"OSV","id":"GHSA-8vjj-wf73-w882","modified":"2024-01-17T18:56:33.057521Z","url":"https://osv.dev/vulnerability/GHSA-8vjj-wf73-w882"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T00:10:33.684Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}