CVE-2021-20185CWE-400

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result…

published January 28, 2021

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01377 · 71.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-01-28T19:01Z
EPSS history
Timeline
  • 28 JAN 19:01Z
    It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result…
    cvelistv5