CVE-2020-25630
A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.5.0"},{"fixed":"3.5.14"},{"introduced":"3.7.0"},{"fixed":"3.7.8"},{"introduced":"3.8.0"},{"fixed":"3.8.5"},{"introduced":"3.9.0"},{"fixed":"3.9.2"}]}]
参照URL
- advisory moodle.org
- web nvd.nist.gov