CVE-2015-2268: Medium severity moodle vulnerability
filter/urltolink/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2268?
CVE-2015-2268 is classified as a denial of service vulnerability due to its potential for significant CPU consumption and service disruption.
How do I fix CVE-2015-2268?
To fix CVE-2015-2268, upgrade to Moodle version 2.8.4, 2.7.6, or 2.6.9 or later.
Who is affected by CVE-2015-2268?
CVE-2015-2268 affects Moodle versions 2.5.0 to 2.8.3, specifically through version 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4.
What type of vulnerability is CVE-2015-2268?
CVE-2015-2268 is a remote denial of service vulnerability related to improper regular expression matching.
Can CVE-2015-2268 be exploited by unauthenticated users?
No, CVE-2015-2268 can only be exploited by authenticated users.