27 matches found
CVE-2018-5499: Improper Input Validation
ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service DoS...
Denial Of Service (DoS) Through Disk Consumption
Moodle is vulnerable to denial of service DoS attacks. A malicious user with the guest role can create multiple big drafts with the Atto module's editor-autosave feature to cause the system to run out of disk space...
Moodle DoS
The vulnerability of the Atto component in the Moodle learning management system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by leveraging the autoconservation feature of the editor’s interface...
Design/Logic Flaw
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...
CVE-2015-5332
Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 are affected by CVE-2015-5332 due to the Atto editor autosave feature. An unauthenticated or guest user can trigger a denial of service (disk consumption) by entering drafts via the editor-autosave mechanism. The underlying issue is in the Atto edi...
MGASA-2015-0464 Updated moodle packages fix security vulnerability
In Moodle before 2.8.9, if guest access is open on the site, unauthenticated users can store Atto draft data through the editor autosave area, which could be exploited in a denial of service attack CVE-2015-5332. In Moodle before 2.8.9, due to a CSRF issue in the site registration form, it is...
PT-2016-1300
Name of the Vulnerable Software and Affected Versions Moodle versions 2.8.x through 2.8.8 Moodle versions 2.9.x through 2.9.2 Description The issue is related to resource management errors in the Atto component of the Moodle learning management system. It can be exploited by a remote attacker usi...