Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory

published 2012-07-16 14 y ago modified 2026-06-16 4 mo ago also GHSA-wxvp-8q8h-r6rr , EUVD-2022-5674

cvss: 6.4; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.4%; EPSS 2.4% chance of exploitation in 30 days, percentile 84%
public exploits: 0; none known

The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.

Patch / fix

fixed in 1 links 4

packagist moodle/moodle 2.0.4, 2.1.1

github.com/moodle/moodle@05f4555 commit
github.com/moodle/moodle@9a380fb commit
github.com/moodle/moodle@e1c2a21 commit
git.moodle.org/gw?p=moodle.git;a=commit;h=e1c2a211f259821910be2cba23679d4… commit

Exploit prediction

2.41% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	2.0	6.4	AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected packages

ecosystem	package	affected	fixed in
packagist	moodle/moodle	>=2.0, <2.0.4 >=2.1, <2.1.1	2.0.4 2.1.1

Classification

Weakness

CWE-264 Permissions, Privileges, and Access Controls
CWE-379 Creation of Temporary File in Directory with Insecure Permissions

References

Sources

CVE List CVE-2011-4293
GitHub Advisory GHSA-wxvp-8q8h-r6rr
NVD CVE-2011-4293

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary