CVE-2009-4301: Moodle

Medium severity, CVSS 6.0. EPSS: 1.4% chance of exploitation in the next 30 days.

mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.

Affected products

• Moodle Moodle: version 1.8.1 only; version 1.8.2 only; version 1.8.3 only; version 1.8.4 only; version 1.8.5 only; version 1.8.7 only; …

Published 2009-12-16. Last modified 2026-06-16.