AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2011-4203

MEDIUM · CVSS 5 EPSS 1.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-12-22 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2011-4203
Severity
MEDIUM
CVSS
5
EPSS
1.10%

Original Filing — NVD Description

CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.