Nuxt: Unauthorized Component Instantiation via Server Island Props

Impact Nuxt server islands accept props via the /nuxtisland/ endpoint. When an application has a server island component that forwards props directly into Vue's dynamic component resolution , resolveDynamicComponent, or h, an attacker can pass a plain string value rather than a component definiti...

Unauthorized Instantiation And Denial Of Service (DoS)

Moodle is vulnerable to unauthorized instantiation and denial of service DoS. The authenticated user is allowed to instantiate any class just by changing URLs in portfolios. Guest users can also launch DoS using this flaw...