CVE-2019-10134CWE-20

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18

Medium · published June 26, 2019

CVSS v3.0
4.2
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01050 · 64.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-06-26T18:14Z
EPSS history
Timeline
  • 26 JUN 18:14Z
    A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18
    cvelistv5