What is GHSA-4qxc-qxrp-33cw?

GHSA-4qxc-qxrp-33cw is a security advisory published by GitHub Security Advisories with High severity. Moodle denial-of-service risk in the draft files area

Which CVE IDs does GHSA-4qxc-qxrp-33cw cover?

GHSA-4qxc-qxrp-33cw covers the following CVE IDs: CVE-2021-32476. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4qxc-qxrp-33cw?

GHSA-4qxc-qxrp-33cw has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-4qxc-qxrp-33cw?

GHSA-4qxc-qxrp-33cw affects 4 products, including: composer/moodle/moodle:\u003e= 3.10, \u003c 3.10.4; composer/moodle/moodle:\u003e= 3.9, \u003c 3.9.7; composer/moodle/moodle:\u003e= 3.8, \u003c 3.8.9; composer/moodle/moodle:\u003e= 3.5.17, \u003c 3.5.18.

GHSA-4qxc-qxrp-33cwHighCVSS 7.5

Moodle denial-of-service risk in the draft files area

Vendor

GitHub Security Advisories

Published

March 12, 2022

Last Modified

April 23, 2024

🔗 CVE IDs covered (1)

CVE-2021-32476 →

📋 Description

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

🎯 Affected products4

composer/moodle/moodle:>= 3.10, < 3.10.4
composer/moodle/moodle:>= 3.9, < 3.9.7
composer/moodle/moodle:>= 3.8, < 3.8.9
composer/moodle/moodle:>= 3.5.17, < 3.5.18

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-32476
https://moodle.org/mod/forum/discuss.php?d=422310
https://github.com/advisories/GHSA-4qxc-qxrp-33cw