CVE-2011-4302: Moodle

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.

Affected products

• Moodle Moodle: version 1.9.2 only; version 1.9.3 only; version 1.9.4 only; version 1.9.5 only; version 1.9.6 only; version 1.9.7 only; …

Published 2012-07-11. Last modified 2026-06-16.