GHSA-j8wr-7xxj-c2fr

ghsaUSosv

Moodle Private files uploaded via incoming mail processing could bypass quota restrictions

view advisory published 2022-05-24Licence: CC-BY-4.0

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-10134US	low3.7	1.05% (64th)	—	2019-06-26
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134WEB
https://github.com/moodle/moodlePACKAGE
https://moodle.org/mod/forum/discuss.php?d=386524WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-10134ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan