Description

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records.

Remediation

References

CVE-2012-3398

Related Vulnerabilities

WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk SQL Injection (5.185)

WordPress Plugin Live Search for WooCommerce Security Bypass (2.0.2)

Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-36760)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (3.4.7)

Dolibarr Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-3991)

Severity

Medium

Classification

CVE-2012-3398

Tags

Missing Update Known Vulnerabilities