Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4734
HistoryJul 27, 2017 - 2:22 a.m.

Regular Expression Denial Of Service (ReDoS)

2017-07-2702:22:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

Moodle is vulnerable to Regular Expression Denial Of Service (ReDoS) attacks. The attacks can be triggered because of the use of a non-optimal regular expression in the URLs filter in filter/urltolink/filter.php, causing high CPU consumption during URL conversion.

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C