Miembros de
Boletines de Vulnerabilidades |
MSA-21-0003: Client side denial of service via personal message |
|
| Software afectado | PHP |
|
by Michael Hawkins. Messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages.Severity/Risk:MinorVersions affected:3.10, 3.9 to 3.9.3, 3.8 to 3.8.6, 3.5 to 3.5.15 and earlier unsupported versionsVersions fixed:3.10.1, 3.9.4, 3.8.7 and 3.5.16Reported by:Rik GouwCVE identifier:CVE-2021-20185Changes More info: https://moodle.org/mod/forum/discuss.php?d=417168&parent=1680841 |
|
