CVE-2011-4133: Moodle RSS Block CSRF Vulnerability
Summary
CVE-2011-4133: Moodle vulnerable to Cross-Site Request Forgery. Affects moodle/moodle versions >= 1.9.0, < 1.9.11. Fixed in 1.9.11. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is a widely used open-source learning platform designed to provide educators, administrators, and learners with a single robust, secure, and integrated system to create personalized learning environments. It offers features such as course management, user management, and various plugins to enhance functionality. However, certain versions of Moodle, specifically 1.9.x before 1.9.11, are vulnerable to a Cross-Site Request Forgery (CSRF) attack that can compromise user authentication when modifying RSS feeds in an RSS block.
Vulnerability Detail
The CSRF vulnerability in Moodle allows remote attackers to hijack the authentication of users without their consent. This can lead to unauthorized actions being performed on behalf of the victim, such as altering RSS feed settings. The vulnerability arises from insufficient validation of requests, enabling attackers to craft malicious requests that exploit the trust a user has in the Moodle application. If exploited, this vulnerability can result in data manipulation and unauthorized access to user accounts.
How To Fix
Minimum fixed version
1.9.11
This is the first release that contains the fix.
composer require moodle/moodle:1.9.11Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the RSS block or disable it entirely until the patch is applied. This can be done through the Moodle admin settings by navigating to the block settings and adjusting the visibility or permissions.
Conclusion
The CSRF vulnerability identified as CVE-2011-4133 in Moodle poses a significant risk to users of versions 1.9.x before 1.9.11. It is crucial to update to the patched version to safeguard against potential exploitation. Additionally, utilizing tools like Vulert can help maintain awareness of vulnerabilities in your open-source projects.
See every vulnerability recorded for moodle/moodle →
FAQ
CSRF is a type of attack that tricks the victim into submitting a request that they did not intend to make, potentially compromising their account.
If you are using Moodle version 1.9.x prior to 1.9.11, your installation is vulnerable. You can check your version in the admin dashboard.
Exploitation of this vulnerability can lead to unauthorized actions being taken on behalf of users, including changes to RSS feeds and potential data breaches.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just the composer.lock file.
Yes, you can use the Vulert playground at Vulert Scanner to check for vulnerabilities in your application without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
