CVE-2012-6101

Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to…

Medium5.8EPSS 1.2%

Published: 27 Jan 2013
Updated: 16 Sept 2024
Reserved: 6 Dec 2012
Assigned by: redhat

Description

Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.

Timeline

2012
6 Dec 2012
6 Dec 2012
ID reserved
By redhat
2013
27 Jan 201352 days later
27 Jan 2013· 52 days later
Published
2024
16 Sept 202412 years later
16 Sept 2024· 12 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2012-6101, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	Medium5.8	AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS (exploitation in 30 days): 1.2% · top 31% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.8.

Weakness

Affected products

n/a
- affected n/a

References (3)

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35991 (opens in a new tab)x_refsource_CONFIRMx_transferred
https://moodle.org/mod/forum/discuss.php?d=220162 (opens in a new tab)x_refsource_CONFIRMx_transferred
[oss-security] 20130121 Moodle security notifications public (opens in a new tab)mailing-listx_refsource_MLISTx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2012-6101](https://cveledger.app/badge/CVE-2012-6101.svg)](https://cveledger.app/cve/CVE-2012-6101)

Record last updated 16 Sept 2024, 17:07 UTC.