Unrated severityNVD Advisory· Published Dec 16, 2009· Updated Apr 23, 2026
CVE-2009-4297
CVE-2009-4297
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected products
15cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- docs.moodle.org/en/Moodle_1.8.11_release_notesnvdPatch
- docs.moodle.org/en/Moodle_1.9.7_release_notesnvdPatch
- moodle.org/mod/forum/discuss.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/37244nvdPatch
- www.vupen.com/english/advisories/2009/3455nvdPatchVendor Advisory
- secunia.com/advisories/37614nvdVendor Advisory
- www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.htmlnvd
News mentions
0No linked articles in our index yet.