CVE-2011-4283

CVE-2011-4283 describes an information disclosure vulnerability in Moodle versions 1.9.x before 1.9.11 and 2.0.x before 2.0.2, where an IMS enterprise enrolment file (imsenterprise-enrol.xml) is inadvertently placed in a publicly accessible course-files area. This allows unauthenticated remote attackers to obtain sensitive information by directly requesting the file. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required for exploitation, leading to a potential compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.