Denial-of-Service Vulnerability in Moodle from Moodle HQ

CVE-2021-32476

What is CVE-2021-32476?

A vulnerability exists in the draft files area of Moodle, which fails to enforce user file upload limits. This oversight may enable an attacker to exploit the system by overwhelming it with excessive file uploads, potentially leading to service disruptions. The affected versions include Moodle 3.10 (up to 3.10.3), 3.9 (up to 3.9.6), 3.8 (up to 3.8.8), 3.5 (up to 3.5.17), as well as earlier unsupported versions. Users are advised to review their security configurations and update to the patched versions to mitigate this vulnerability.

References