MSA-26-0003: Denial of service risk in TeX formula editor

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-02-17 10:32 UTC
Importiert: 2026-06-22 13:30 UTC
CVSS: 6.5
Quelle-ID: moodle
uid_hash: c22d680c585dc4d512a68a37aa7bc4cb870528b983298311079e81157764dc91

Moodle Security Announcements

by Michael Hawkins.

Rendering of TeX content with mimetex in the formula editor required execution time limitations to prevent a denial of service risk.

Severity/Risk: Serious

Versions affected: 5.1 to 5.1.1, 5.0 to 5.0.4, 4.5 to 4.5.8 and earlier unsupported versions

Versions fixed: 5.1.2, 5.0.5 and 4.5.9

Reported by: Aleksey Solovev (Positive Technologies)

CVE identifier: CVE-2026-26047

Tracker issue: MDL-86785 Denial of service risk in TeX formula editor

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-26047	MEDIUM	6.5	MEDIUM	6.5			2026-02-21

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Moodle Security Announcements	moodle	vendor_advisory	cms	-	de	https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml