{"id":"CVE-2012-6101","aliases":["EUVD-2012-5970","GHSA-8p2c-fgqv-ch4v","UBUNTU-CVE-2012-6101"],"status":"published","title":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4...","description":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01207,"percentile":0.68538,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2013-01-27T22:00:00Z","modified":"2026-06-16T23:47:49Z","products":[{"vendor":"moodle","product":"moodle"}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git\u0026a=search\u0026h=HEAD\u0026st=commit\u0026s=MDL-35991","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=220162","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2013/01/21/1","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6101"},{"url":"https://github.com/advisories/GHSA-8p2c-fgqv-ch4v"},{"url":"https://ubuntu.com/security/CVE-2012-6101","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2013/01/21","tags":["report"]},{"url":"https://moodle.org/security/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6101","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-6101","description":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.","status":"published","published":"2013-01-27T22:00:00Z","modified":"2024-09-16T17:07:43.307Z","updated_at":"2026-11-02T14:34:50.94153Z"}],"euvd":[{"id":"EUVD-2012-5970","description":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.","status":"published","published":"2013-01-27T22:00:00Z","modified":"2024-09-16T17:07:43Z","updated_at":"2026-11-03T00:55:45.275329Z"}],"ghsa":[{"id":"GHSA-8p2c-fgqv-ch4v","title":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4...","description":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.","status":"published","published":"2022-05-13T01:12:56Z","modified":"2023-02-01T05:03:54Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:50:06.799159Z"}],"nvd":[{"id":"CVE-2012-6101","description":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.","status":"published","published":"2013-01-27T22:55:03.837Z","modified":"2026-06-16T23:47:49.72Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"UBUNTU-CVE-2012-6101","description":"Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.","status":"withdrawn","published":"2013-01-27T22:55:00Z","modified":"2025-07-16T07:17:03.911786Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}