CVE-2011-4285: Moodle

Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days.

The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role.

Affected products

• Moodle Moodle: version 2.0.0 only; version 2.0.1 only

Published 2012-07-16. Last modified 2026-06-16.