{"id":"CVE-2011-4283","aliases":[],"url":"https://o3.security/vulnerability/CVE-2011-4283","summary":"Moodle allows remote attackers to obtain sensitive information","details":"Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.","published":"2022-05-13T01:13:09Z","modified":"2025-04-12T02:57:06.902564Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"1.9.11"},{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"2.0.2"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4283"},{"type":"PACKAGE","url":"https://github.com/moodle/moodle"},{"type":"WEB","url":"http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6fde0dac702b3d0954bd1c34d427944e9cd89ae6"},{"type":"WEB","url":"http://git.moodle.org/gw?p=moodle.git;a=commit;h=6fde0dac702b3d0954bd1c34d427944e9cd89ae6"},{"type":"WEB","url":"http://moodle.org/mod/forum/discuss.php?d=170009"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2011/11/14/1"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-04-12T02:57:06.902564Z"}}