VDB

CVE-2020-14322

CVE-2020-14322 PUBLISHED CVSS 7.5 HIGH

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.

EPSS 0.93% · 60.3th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.93%
60.3th percentile

Affected Products

VendorProductVersions
Bitnamimoodle3.9.0, 3.5.0, 3.7.0
Bitnamimoodle3.7.0, 3.9.0, 3.5.0

Timeline

  • Jul 20, 2020 CVE Published
  • Aug 17, 2022 EPSS Score
  • Oct 3, 2022 EPSS Score
  • Nov 19, 2022 EPSS Score
  • Jan 4, 2023 EPSS Score
  • Feb 20, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 8, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jul 11, 2023 EPSS Score
  • Aug 26, 2023 EPSS Score
  • Oct 12, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›