GHSA-jcrj-x36p-h9f6

Suggest an improvement
Source
https://github.com/advisories/GHSA-jcrj-x36p-h9f6
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jcrj-x36p-h9f6/GHSA-jcrj-x36p-h9f6.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-jcrj-x36p-h9f6
Aliases
  • CVE-2011-4582
Published
2022-05-13T01:13:15Z
Modified
2024-01-17T18:41:36Z
Summary
Moodle Open Redirect in Calendar Set Page
Details

Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.

Database specific 
{
    "cwe_ids":  [
        "CWE-601"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-01-17T18:26:35Z",
    "nvd_published_at":  "2012-07-20T10:40:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / moodle/moodle

Package

Name
moodle/moodle
Purl
pkg:composer/moodle/moodle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.1
Fixed
2.1.3

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jcrj-x36p-h9f6/GHSA-jcrj-x36p-h9f6.json"