CVE-2011-4309: Moodle

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL.

Affected products

• Moodle Moodle: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.1.0 only; …

Published 2012-07-11. Last modified 2026-06-16.