Moodle: arbitrary file read risk through pdftex (CVE-2024-43426)

Summary

Moodle: arbitrary file read risk through pdftex

Original description

The description as published by the source.

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.12"},{"introduced":"4.2.0"},{"fixed":"4.2.9"},{"introduced":"4.3.0"},{"fixed":"4.3.6"},{"introduced":"4.4.0"},{"fixed":"4.4.2"}]}]

References

advisory nvd.nist.gov
advisory github.com
package github.com
report bugzilla.redhat.com
web moodle.org