CVE-2026-26046
Moodle: moodle: improper input sanitization in tex filter administration setting
概要
Moodle: moodle: improper input sanitization in tex filter administration setting
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.5.9"},{"introduced":"5.0.0"},{"fixed":"5.0.5"},{"introduced":"5.1.0"},{"fixed":"5.1.2"}]}]
参照URL
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- report bugzilla.redhat.com