CVE-2012-1160: moodle moodle – CVSS 2.7 · Watchpost

← All vulnerabilities

CVE-2012-1160

LOW 2.7CVE-2012-1160 · Published 14/11/2019 · updated 16/06/2026

In short

CVE-2012-1160 is a LOW (CVSS 2.7) vulnerability affecting moodle (moodle).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.3% of all vulnerabilities.
Fix: update to 2.2.2 or later.

Package	Affected versions	Patched versions
moodle moodle	`< 2.2.2`	`2.2.2`

Description

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php

References

lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html · Third Party Advisory
access.redhat.com/security/cve/cve-2012-1160 · Broken Link
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
moodle.org/mod/forum/discuss.php · Patch
security-tracker.debian.org/tracker/CVE-2012-1160 · Third Party Advisory

More vulnerabilities in moodle

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free