CVE-2025-26525
Arbitrary file read risk through pdfTeX
Summary
Arbitrary file read risk through pdfTeX
Original description
The description as published by the source.
Insufficient sanitizing in the TeX notation filter resulted in an
arbitrary file read risk on sites where pdfTeX is available (such as
those with TeX Live installed).
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.16"},{"introduced":"4.3.0"},{"fixed":"4.3.10"},{"introduced":"4.4.0"},{"fixed":"4.4.6"},{"introduced":"4.5.0"},{"fixed":"4.5.2"}]}]
References
- advisory moodle.org
- advisory nvd.nist.gov
- advisory github.com
- patch git.moodle.org