← Back

CVE-2024-43426

nvd nist
Published: Nov 7, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: patrick@puiterwijk.org (Secondary)

Description

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

Affected (4)

Products: Moodle: Moodle
Moodle
1 product
Moodle
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Moodle
From 4.1.0 to 4.1.12
Moodle
From 4.2.0 to 4.2.9
Moodle
From 4.3.0 to 4.3.6
Moodle
From 4.4.0 to 4.4.2

Related CWEs

CWE-1287
Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

References (2)

Source: patrick@puiterwijk.org
Permissions Required
Source: patrick@puiterwijk.org
Vendor Advisory

Timeline

No history available yet.