CVE-2011-4286: Moodle Cross-site Scripting Vulnerability in Media Filter
Summary
CVE-2011-4286: Moodle vulnerable to Cross-site Scripting. Affects moodle/moodle across 2 version ranges.
>= 1.9.0, < 1.9.11
>= 2.0.0, < 2.0.2
Fixed in 1.9.11 or 2.0.2, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning platform designed to provide educators, administrators, and learners with a single robust, secure, and integrated system to create personalized learning environments. It supports various multimedia formats, including Flash Video and YouTube videos, which are essential for interactive learning experiences. However, certain versions of Moodle are vulnerable to cross-site scripting (XSS) attacks, particularly in the media-filter implementation, which can compromise the security of users and the integrity of the platform.
Vulnerability Detail
Multiple cross-site scripting (XSS) vulnerabilities exist in the media-filter implementation of Moodle versions 1.9.x before 1.9.11 and 2.0.x before 2.0.2. These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML into the application via vectors involving Flash Video (FLV) files and YouTube videos. If exploited, these vulnerabilities could lead to unauthorized actions being performed on behalf of users, data theft, or the spread of malware.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 1.9.0, < 1.9.111.9.11composer require moodle/moodle:1.9.11 -
>= 2.0.0, < 2.0.22.0.2composer require moodle/moodle:2.0.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary measure, users can disable the media filter to mitigate the risk of XSS attacks until they can update to a secure version. This can be done in the Moodle settings under the filters section.
Conclusion
The identified cross-site scripting vulnerabilities in Moodle's media filter pose significant risks to users and the integrity of the platform. It is crucial for users to update to the latest patched versions to safeguard against potential exploits. Additionally, utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for moodle/moodle →
FAQ
The vulnerability is a cross-site scripting (XSS) issue that allows attackers to inject malicious scripts into the Moodle platform.
Moodle versions 1.9.x before 1.9.11 and 2.0.x before 2.0.2 are affected by this vulnerability.
Exploitation of this vulnerability can lead to unauthorized actions, data theft, and potential malware distribution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just your composer.lock file.
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
