CVEvulnerability
CVE-2024-43426
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-11-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-1287
Description
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.
Affected configurations
• moodle moodle (>= 4.1.0 < 4.1.12)
• moodle moodle (>= 4.2.0 < 4.2.9)
• moodle moodle (>= 4.3.0 < 4.3.6)
• moodle moodle (>= 4.4.0 < 4.4.2)
Related
Weakness · CWE (1)
- CWE-1287 Improper Validation of Specified Type of Input weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2304254 Permissions Required
- https://moodle.org/mod/forum/discuss.php?d=461194 Vendor Advisory