GHSA-vjmm-r9gg-425m

ghsaUSosv

Moodle has arbitrary file read risk through pdfTeX

view advisory published 2024-11-07Licence: CC-BY-4.0

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-43426US	—	0.71% (53rd)	—	2024-11-07
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Li…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=2304254WEB
https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82745WEB
https://github.com/moodle/moodlePACKAGE
https://moodle.org/mod/forum/discuss.php?d=461194WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-43426ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan