CVE-2012-6101: Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2...

Security readout for executives and security teams

This CVE affects older Moodle sites and could let an attacker send users through trusted Moodle URLs to arbitrary external sites. The main business risk is phishing and credential theft, not direct server takeover. The public sources do not provide CVSS scoring or evidence of active exploitation. Exposure is mainly organizations still running Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, or 2.4.x before 2.4.1. Internet-facing learning portals are more exposed because trusted school or corporate domains can make phishing links more convincing. Handle as a legacy-platform remediation and phishing-risk reduction item. It is not evidenced as actively exploited in the supplied sources, but exposed education or training portals can amplify credential-theft campaigns if left unpatched. Mitigation focus: Upgrade affected Moodle branches to the fixed versions or later.; Review Moodle advisory and MDL-35991 references for vendor-confirmed fixes.; Prioritize internet-facing or identity-integrated Moodle systems..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.