Description
filter/urltolink/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.
Remediation
References
Related Vulnerabilities
Oracle Application Server Other Vulnerability (CVE-2006-3710)
PHP Improper Input Validation Vulnerability (CVE-2012-0788)
MySQL CVE-2018-2767 Vulnerability (CVE-2018-2767)
WordPress Plugin Portfolio Gallery-Photo Gallery Cross-Site Scripting (2.1.10)
Drupal Resource Management Errors Vulnerability (CVE-2014-5266)