CVE-2011-4586

N/A Unknown
Published: July 20, 2012 Modified: April 29, 2026
View on NVD

Description

CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=581e8dba387f090d89382115fd850d8b44351526
Source: secalert@redhat.com
http://moodle.org/mod/forum/discuss.php?d=191754
Source: secalert@redhat.com
Vendor Advisory
http://www.debian.org/security/2012/dsa-2421
Source: secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=761248
Source: secalert@redhat.com
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=581e8dba387f090d89382115fd850d8b44351526
Source: af854a3a-2127-422b-91ae-364da2661108
http://moodle.org/mod/forum/discuss.php?d=191754
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.debian.org/security/2012/dsa-2421
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=761248
Source: af854a3a-2127-422b-91ae-364da2661108

8 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.1%
79th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

moodle