CVE-2011-4582
Moodle Open Redirect in Calendar Set Page
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
Exploit likelihood
What each source reports
NVD Score used
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
- Record
CVE-2011-4582- CVSS 2.0
- 4.9 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
- Record
CVE-2011-4582- Updated
- 2026-11-02
EUVDEUVD-2022-4334 No score
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
- Record
EUVD-2022-4334- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jcrj-x36p-h9f6 No score
Moodle Open Redirect in Calendar Set Page
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
- Record
GHSA-jcrj-x36p-h9f6- Weakness
- CWE-601
- Updated
- 2026-11-02
OSVGHSA-jcrj-x36p-h9f6 No score
Moodle Open Redirect in Calendar Set Page
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
- Record
GHSA-jcrj-x36p-h9f6- Weakness
- CWE-601
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
moodle/moodlePackagist |
2.1 up to 2.1.3 | 2.1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4582 is a medium vulnerability (CVSS 4.9) in Moodle, published July 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 67th percentile. Fixed in moodle/moodle 2.1.3.
References
bugzilla.redhat.com/show_bug.cgi?id=761248
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28720&sr=1
moodle.org/mod/forum/discuss.php?d=191748
nvd.nist.gov/vuln/detail/CVE-2011-4582
github.com/moodle/moodle/commit/0d2672748c00181d9cdae2aabbab916cbd64c47d