Candidate: CVE-2011-4582 PublicDate: 2012-07-20 10:40:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4582 Description: Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL. Ubuntu-Description: Notes: Bugs: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652235 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_moodle: upstream: http://moodle.org/mod/forum/discuss.php?d=191748 upstream_moodle: needs-triage hardy_moodle: ignored (reached end-of-life) lucid_moodle: ignored (reached end-of-life) maverick_moodle: ignored (reached end-of-life) natty_moodle: ignored (reached end-of-life) oneiric_moodle: ignored (reached end-of-life) precise_moodle: not-affected (1.9.9.dfsg2-5) quantal_moodle: not-affected (1.9.9.dfsg2-5) raring_moodle: not-affected (1.9.9.dfsg2-5) saucy_moodle: not-affected (1.9.9.dfsg2-5) devel_moodle: not-affected (1.9.9.dfsg2-5)