Lucene search

China National Vulnerability DatabaseCNVD-2024-13538

HistoryMar 14, 2024 - 12:00 a.m.

Moodle Denial of Service Vulnerability (CNVD-2024-13538)

2024-03-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

moodle

e-learning

file size checking

attacker

denial of service

vulnerability

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A denial-of-service vulnerability exists in Moodle, which stems from insufficient file size checking, and can be exploited by an attacker to cause a denial of service.

CPENameOperatorVersion
moodle moodle >=4.3，le4.3.2
moodle moodle >=4.2，le4.2.5
moodle moodle >=4.1，le4.1.8

Name	Operator	Version
moodle moodle >=4.3，	le	4.3.2
moodle moodle >=4.2，	le	4.2.5
moodle moodle >=4.1，	le	4.1.8