Moodle: arbitrary file read risk through pdftex (CVE-2024-43426)

Résumé

Moodle: arbitrary file read risk through pdftex

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.12"},{"introduced":"4.2.0"},{"fixed":"4.2.9"},{"introduced":"4.3.0"},{"fixed":"4.3.6"},{"introduced":"4.4.0"},{"fixed":"4.4.2"}]}]

Références

advisory nvd.nist.gov
advisory github.com
package github.com
report bugzilla.redhat.com
web moodle.org