GHSA-4hmr-39vp-xfrr

ghsaUSosv

Moodle has an arbitrary file read risk through pdfTeX

view advisory published 2025-02-24Licence: CC-BY-4.0

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-26525US	—	0.44% (38th)	—	2025-02-24
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

references

External citations — patches, advisories, analysis.

https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136WEB
https://github.com/moodle/moodlePACKAGE
https://moodle.org/mod/forum/discuss.php?d=466141WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-26525ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan