CVE-2015-0217: filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x be...

Security readout for executives and security teams

CVE-2015-0217 is an availability flaw in Moodle's media plugin filter. An authenticated user could submit a crafted string that triggers excessive CPU use or a partial outage. It is not described as data theft or remote takeover, but it could disrupt learning or internal training platforms. Exposure is most likely in legacy Moodle deployments running the affected 2.5, 2.6, 2.7, or 2.8 branches with authenticated user access. Public or broadly enrolled sites have higher practical risk because more users can reach content paths that invoke media filtering. Treat this as a practical legacy-platform availability risk. It deserves scheduled remediation, faster if the Moodle instance is internet-facing, heavily used, or open to many authenticated users. It is not supported by the provided evidence as an actively exploited emergency. Mitigation focus: Upgrade affected Moodle 2.6, 2.7, and 2.8 deployments to fixed or later supported releases.; For Moodle 2.5 deployments, check Moodle guidance because the bundle states through 2.5.9 affected.; Restrict account creation and review roles allowed to submit filtered content..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.