| Package | Affected versions | Patched versions |
|---|---|---|
| moodle | = 2.8.0= 2.8.1= 2.8.2= 2.8.3= 2.8.4= 2.8.5= 2.8.6= 2.8.7= 2.8.8= 2.9.0= 2.9.1= 2.9.2 |
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service (disk consumption) by leveraging the guest role and entering drafts with the editor-autosave feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free