{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T00:25:19.363","vulnerabilities":[{"cve":{"id":"CVE-2021-20185","sourceIdentifier":"secalert@redhat.com","published":"2021-01-28T20:15:13.133","lastModified":"2026-06-17T03:33:26.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages."},{"lang":"es","value":"Se encontró en Moodle versiones anteriores a 3.10.1, 3.9.4, 3.8.7 y 3.5.16, que la mensajería no imponía un límite de caracteres al enviar mensajes, lo que podría resultar en la denegación de servicio del lado del cliente (navegador) para los usuarios que recibían mensajes muy grandes"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"moodle","versions":[{"version":"moodle 3.10.1, moodle 3.9.4, moodle 3.8.7, moodle 3.5.16","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.16","matchCriteriaId":"23C5022F-A799-4279-8E31-BDAE6C98F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"3.8.0","versionEndExcluding":"3.8.7","matchCriteriaId":"4C0C5BDE-B2B5-4DE7-BDE0-831F3B56A9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9.0","versionEndExcluding":"3.9.4","matchCriteriaId":"47B9548F-912D-4D36-BE31-566EF2812EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.10.0:*:*:*:*:*:*:*","matchCriteriaId":"7B9E83AE-D857-4F96-9466-1361E116D160"}]}]}],"references":[{"url":"https://moodle.org/mod/forum/discuss.php?d=417168","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=417168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}