Lucene search
GoogleOSV:GHSA-VXQH-MX28-7GHWHistoryMay 14, 2022 - 3:16 a.m.
Moodle Portfolio script allows instantiation of class chosen by user
2022-05-1403:16:23
Google
osv.dev
7
moodle
portfolio
instantiation
user-chosen class
ddos attack
software
An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack.
Related
prion
prion
Code injection
2018-05-25 12:29:00
ubuntucve
ubuntucve
CVE-2018-1137
2018-05-25 00:00:00
cvelist
cvelist
CVE-2018-1137
2018-05-25 12:00:00
veracode
veracode
Unauthorized Instantiation And Denial Of Service (DoS)
2018-05-28 04:14:54
nvd
nvd
CVE-2018-1137
2018-05-25 12:29:00
github
github
Moodle Portfolio script allows instantiation of class chosen by user
2022-05-14 03:16:23
osv
osv
CVE-2018-1137
2018-05-25 12:29:00
cve
cve
CVE-2018-1137
2018-05-25 12:29:00
openvas
openvas
Moodle 3.x Multiple Vulnerabilities (May 2018) - Linux
2018-05-29 00:00:00
Moodle 3.x Multiple Vulnerabilities (May 2018) - Windows
2018-05-29 00:00:00