Description (CNA)
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Moodle Project / moodle | affected 4.5.0 before 4.5.2; affected 4.4.0 before 4.4.6; affected 4.3.0 before 4.3.10; affected 4.1.0 before 4.1.16; unknown 4.2.0 before 4.2.*; unknown 0 before 4.0.* |
CWE
CWE-552
References
- https://moodle.org/mod/forum/discuss.php?d=466141
- https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
ADP enrichment
No English description supplied.
No references supplied.