VDB
CVE-2021-32476
CVE-2021-32476
PUBLISHED
CVSS 7.5 HIGH
A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
EPSS 1.09% · 64.2th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.09%
64.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | moodle | 0, 3.9.0, 3.10.0 |
| Bitnami | moodle | 0, 3.8.0, 3.9.0 |
Timeline
- May 17, 2021 CVE Published
- Mar 12, 2022 EPSS Score
- May 3, 2022 EPSS Score
- Jun 24, 2022 EPSS Score
- Oct 7, 2022 EPSS Score
- Nov 27, 2022 EPSS Score
- Dec 28, 2022 EPSS Score
- Jan 18, 2023 EPSS Score
- Feb 23, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 2, 2023 EPSS Score
- Jun 23, 2023 EPSS Score