CVE-2011-4295

CVE-2011-4295 describes an authorization bypass vulnerability in Moodle versions 2.0.x before 2.0.4 and 2.1.x before 2.1.1. Specifically, the moodle_enrol_external:role_assign function in enrol/externallib.php lacks proper authorization checks, allowing authenticated users to elevate their privileges by assigning themselves roles. This vulnerability has a CVSS score of 6.5, indicating a medium severity due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.