BIT-moodle-2024-43426

vendorUSosv

Moodle: arbitrary file read risk through pdftex

view advisory published 2025-08-06Licence: per source

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-43426US——
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Li…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan