CVE-2021-36395

State: Published
Severity: 7.5 High
Published: Mar 6, 2023
Updated: Mar 7, 2025
Reserved: Jul 12, 2021

Description

In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-400
CWE-674 Uncontrolled Recursion

Affected Products

Product	Versions
Moodlen/a	3.11, 3.10 to 3.10.4, 3.9 to 3.9.7 and earlier unsupported versionsAffected

References

https://moodle.org/mod/forum/discuss.php?d=424801

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.