Moodle Denial-of-Service Vulnerability in TeX Formula Editor

A denial-of-service vulnerability exists in Moodle's TeX formula editor, specifically when rendering TeX content with mimetex. The issue arises from inadequate execution time limits, allowing specially crafted formulas to use excessive server resources. An authenticated user could exploit this vulnerability to disrupt service or degrade performance.

Impact

Exploitation of this vulnerability leads to uncontrolled resource consumption, particularly CPU and memory, causing a denial-of-service condition. This can slow down the application and its host operating system, potentially crashing the application or locking out legitimate users.