Lucene search

CVE-2021-32476

🗓️ 11 Mar 2022 18:17:15Reported by redhatType

cve🔗 web.nvd.nist.gov👁 77 Views🌐 2 Media mentions

A denial-of-service risk in Moodle versions due to draft files area not respecting upload limits

Reporter	Title	Published	Views	Family All 34
Veracode	Denial Of Service (DoS)	16 Mar 202204:04	–	veracode
OSV	Moodle denial-of-service risk in the draft files area	12 Mar 202200:00	–	osv
Github Security Blog	Moodle denial-of-service risk in the draft files area	12 Mar 202200:00	–	github
OpenVAS	Moodle < 3.5.18, 3.8.x < 3.8.9, 3.9.x < 3.9.7, 3.10.x < 3.10.4 Multiple Vulnerabilities (MSA-21-0013, MSA-21-0014, MSA-21-0015, MSA-21-0016)	15 Mar 202200:00	–	openvas
OpenVAS	Moodle < 3.5.18, 3.8.x < 3.8.9, 3.9.x < 3.9.7, 3.10.x < 3.10.4 Multiple Vulnerability	6 Jul 202100:00	–	openvas
Tenable Nessus	Moodle 3.8.x < 3.8.9 Multiple Vulnerabilities	20 Feb 202300:00	–	nessus
Tenable Nessus	Moodle 3.5.x < 3.5.18 Multiple Vulnerabilities	20 Feb 202300:00	–	nessus
Tenable Nessus	Moodle 3.10.x < 3.10.4 Multiple Vulnerabilities	20 Feb 202300:00	–	nessus
Tenable Nessus	Moodle 3.9.x < 3.9.7 Multiple Vulnerabilities	20 Feb 202300:00	–	nessus
Redos	ROS-2-581	8 Sep 202100:00	–	redos

Nvd

Vulners

Node

moodle moodleRange<3.5.18

moodle moodleRange3.8.0–3.8.9

moodle moodleRange3.9.0–3.9.7

moodle moodleRange3.10.0–3.10.4

[
  {
    "vendor": "n/a",
    "product": "moodle",
    "versions": [
      {
        "version": "3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17",
        "status": "affected"
      }
    ]
  }
]

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Mar 2022 18:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS37.5

EPSS0.001

CWE-770