{"id":"GHSA-m2pf-4pf8-45j2","aliases":["CVE-2011-4291"],"title":"Moodle allows remote authenticated users to cause a denial of service (invalid database records)","description":"Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations.","severity":"medium","score":4.9,"published":"2022-05-13T01:13:18.000Z","modified":"2025-04-12T02:57:07.038Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","ranges":[{"events":[{"introduced":"2.0.0"},{"fixed":"2.0.3"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.0.3"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-4291","http://git.moodle.org","http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=34b5e856b0c98aab3f5317119093628df0834957","http://git.moodle.org/gw?p=moodle.git;a=commit;h=34b5e856b0c98aab3f5317119093628df0834957","http://moodle.org/mod/forum/discuss.php?d=175593","http://openwall.com/lists/oss-security/2011/11/14/1"],"sources":[{"name":"OSV","id":"GHSA-m2pf-4pf8-45j2","modified":"2025-04-12T02:57:07.038294Z","url":"https://osv.dev/vulnerability/GHSA-m2pf-4pf8-45j2"}],"assessments":[{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U","score":4.9}]}