{"id":"GHSA-jcrj-x36p-h9f6","aliases":["CVE-2011-4582"],"title":"Moodle Open Redirect in Calendar Set Page","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.","severity":"medium","score":null,"published":"2022-05-13T01:13:15.000Z","modified":"2024-01-17T18:41:36.746Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-jcrj-x36p-h9f6","url":"https://osv.dev/vulnerability/GHSA-jcrj-x36p-h9f6"}],"ranges":[{"events":[{"introduced":"2.1"},{"fixed":"2.1.3"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.1.3"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-4582","https://github.com/moodle/moodle/commit/0d2672748c00181d9cdae2aabbab916cbd64c47d","https://github.com/moodle/moodle/commit/21e7d4c5fc9cc5df54c9c7d82190f1339d163a9e","https://github.com/moodle/moodle/commit/7f422374c101dcb0affdd5127b855671af4f3748","https://github.com/moodle/moodle/commit/eb59a448f7879d69b21fcde7f1fcddd69655e045","https://bugzilla.redhat.com/show_bug.cgi?id=761248","https://github.com/moodle/moodle","http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28720&sr=1","http://moodle.org/mod/forum/discuss.php?d=191748"],"sources":[{"name":"OSV","id":"GHSA-jcrj-x36p-h9f6","modified":"2024-01-17T18:41:36.746504Z","url":"https://osv.dev/vulnerability/GHSA-jcrj-x36p-h9f6"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T03:30:33.923Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}