BIT-moodle-2025-26525

vendorUSosv

Arbitrary file read risk through pdfTeX

view advisory published 2025-08-10Licence: per source

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-26525US	—	0.44% (38th)	—	2025-02-24
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

references

External citations — patches, advisories, analysis.

https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136FIX
https://moodle.org/mod/forum/discuss.php?d=466141ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-26525WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan