Описание
A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.
Отчет
This vulnerability is rated as Moderate severity because exploitation requires an authenticated user account and is limited to resource exhaustion resulting in denial of service, without impacting data confidentiality or integrity. Moodle is not shipped or supported in Red Hat Enterprise Linux, restricting any potential impact to community-supported deployments such as Fedora. Furthermore, triggering this condition requires the TeX notation filter to be actively enabled and configured to utilize mimetex for equation rendering.
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.
A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.
A denial-of-service vulnerability was identified in Moodle\u2019s TeX ...
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits
EPSS
6.5 Medium
CVSS3