Description

filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.

Remediation

References

CVE-2015-0217

Related Vulnerabilities

WordPress Plugin Form Vibes-Database Manager for Forms Unspecified Vulnerability (1.4.2)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14169)

WordPress Plugin Appointments Unspecified Vulnerability (2.2.2.1)

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Cross-Site Scripting (5.0.2)

WordPress 5.5.x PHP Object Injection (5.5 - 5.5.4)

Severity

Medium

Classification

CVE-2015-0217

Tags

Missing Update Known Vulnerabilities