← Back

CVE-2025-26525

nvd nist
Published: Feb 24, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 4.0
Source: patrick@puiterwijk.org (Secondary)

Description

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

Affected (4)

Products: Moodle: Moodle
Moodle
1 product
Moodle
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Moodle
From 4.1.0 to 4.1.16
Moodle
From 4.3.0 to 4.3.10
Moodle
From 4.4.0 to 4.4.6
Moodle
From 4.5.0 to 4.5.2

Related CWEs

CWE-552
Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (2)

Source: patrick@puiterwijk.org
Patch
Source: patrick@puiterwijk.org
Vendor Advisory

Timeline

No history available yet.