CVE-2020-25630CWE-400

A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could…

published December 8, 2020

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01362 · 71.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2020-12-08T00:13Z
EPSS history
Timeline
  • 08 DEC 00:13Z
    A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could…
    cvelistv5