Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-26047

Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 0 to < 4.5.9affected
  • 5.0.0 to < 5.0.5affected
  • 5.1.0 to < 5.1.2affected

References