CVE-2011-4583: Moodle

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.

Affected products

• Moodle Moodle: version 2.1.0 only; version 2.1.1 only; version 2.1.2 only; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; …

Published 2012-07-20. Last modified 2026-06-16.