{"id":"GHSA-9p54-pc88-36c4","aliases":["CVE-2011-4300"],"title":"Moodle does not properly restrict access to category and course data","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"The `file_browser` component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.","severity":"medium","score":null,"published":"2022-05-13T01:13:15.000Z","modified":"2024-01-17T16:26:38.293Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-9p54-pc88-36c4","url":"https://osv.dev/vulnerability/GHSA-9p54-pc88-36c4"}],"ranges":[{"events":[{"introduced":"2.1"},{"fixed":"2.1.2"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.1.2"]},{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-9p54-pc88-36c4","url":"https://osv.dev/vulnerability/GHSA-9p54-pc88-36c4"}],"ranges":[{"events":[{"introduced":"2.0.0"},{"fixed":"2.0.5"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.0.5"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-4300","https://github.com/moodle/moodle/commit/6f7c43c7de8f62cd53a7f3b54ad5325cd109c1be","https://github.com/moodle/moodle/commit/81c77993e3808bba68fe24d6bfbac19a41679a6f","https://github.com/moodle/moodle/commit/f6b07c4da54a9db24723beb147e8a19a3d487e00","https://bugzilla.redhat.com/show_bug.cgi?id=747444","https://github.com/moodle/moodle","http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f6b07c4da54a9db24723beb147e8a19a3d487e00","http://git.moodle.org/gw?p=moodle.git;a=commit;h=f6b07c4da54a9db24723beb147e8a19a3d487e00","http://moodle.org/mod/forum/discuss.php?d=188311"],"sources":[{"name":"OSV","id":"GHSA-9p54-pc88-36c4","modified":"2024-01-17T16:26:38.293613Z","url":"https://osv.dev/vulnerability/GHSA-9p54-pc88-36c4"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T21:45:31.439Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}