Lucene search
GoogleOSV:BIT-MOODLE-2024-25978HistoryMar 31, 2024 - 6:22 p.m.
BIT-moodle-2024-25978
2024-03-3118:22:52
Google
osv.dev
6
file picker
unzip functionality
denial of service
risk
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
High
EPSS
0
Percentile
15.5%
Insufficient file size checks resulted in a denial of service risk in the file picker’s unzip functionality.
Related
github
github
Uncontrolled Resource Consumption in moodle
2024-02-19 18:31:32
ubuntucve
ubuntucve
CVE-2024-25978
2024-02-19 00:00:00
nvd
nvd
CVE-2024-25978
2024-02-19 17:15:08
prion
prion
Design/Logic Flaw
2024-02-19 17:15:00
vulnrichment
vulnrichment
veracode
veracode
Denial Of Service (DoS)
2024-04-03 10:29:42
cve
cve
CVE-2024-25978
2024-02-19 17:15:08
cnvd
cnvd
Moodle Denial of Service Vulnerability (CNVD-2024-13538)
2024-03-14 00:00:00
osv
osv
Uncontrolled Resource Consumption in moodle
2024-02-19 18:31:32
cvelist
cvelist
nessus
nessus
Fedora 38 : moodle (2024-d2f180202f)
2024-02-29 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: moodle-4.1.9-1.fc38
2024-02-29 02:00:34
openvas
openvas
Moodle 4.1.x < 4.1.9, 4.2.x < 4.2.5, 4.3.x < 4.3.3 Multiple Vulnerabilities
2024-02-20 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2024-d2f180202f)
2024-03-01 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
High
EPSS
0
Percentile
15.5%
Related for OSV:BIT-MOODLE-2024-25978