Description

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.

Remediation

References

CVE-2011-4302

Related Vulnerabilities

WordPress Plugin Recipe Card Blocks for Gutenberg & Elementor Cross-Site Scripting (2.8.2)

Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5690)

WordPress Plugin JC Coupon Cross-Site Scripting (2.5)

MySQL CVE-2017-3641 Vulnerability (CVE-2017-3641)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3946)

Severity

Medium

Classification

CVE-2011-4302 CWE-20

Tags

Missing Update Known Vulnerabilities