CVE-2024-43426

Moodle: arbitrary file read risk through pdftex

High · published November 7, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00712 · 53.1th percentile
Published
2024-11-07T13:22Z
EPSS history
Timeline
  • 07 NOV 13:22Z
    Moodle: arbitrary file read risk through pdftex
    cvelistv5