Description (CNA)
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Moodle / moodle | affected 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18 |
CWE
CWE-20
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134
- https://moodle.org/mod/forum/discuss.php?d=386524
ADP enrichment
No English description supplied.