Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2025-26525

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

VectorNETWORK

PublishedFeb 24, 2025, 20:15

Published Bypatrick@puiterwijk.org

Base Score

Score8.6

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)4.5.0-beta4.5.2N/A

moodle/moodle(Packagist)4.4.0-beta4.4.6N/A

moodle/moodle(Packagist)4.3.0-beta4.3.10N/A

moodle/moodle(Packagist)04.1.16N/A

References

https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
https://moodle.org/mod/forum/discuss.php?d=466141

Weakness Type

CWE-552

CVSS Metrics

Base Score

8.6

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK