Description

filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.

Remediation

References

CVE-2015-0217

Related Vulnerabilities

Oracle Application Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2006-0586)

WordPress Plugin Booking calendar, Appointment Booking System Multiple Vulnerabilities (2.1.7)

WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Remote Code Execution (1.5.89)

WordPress Plugin Login or Logout Menu Item Security Bypass (1.1.1)

PrestaShop Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-41651)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2015-0217