Description
Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "brute force attacks on user accounts" via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | moodle | 1.8.2.dfsg-3+lenny1 | DTSA-195-1 |
Advisories 1
- DTSA-195-1 moodle - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- SUSE-SR:2009:007 vendor-advisory
- http://moodle.org/security/
- 34418 third-party-advisory
- [oss-security] 20090204 CVS request - Moodle mailing-list