PT-2019-11590 · Moodle+1 · Moodle+1

Guillermo Leon Alvarez Salamanca · Publicado 2019-06-18 · Atualizado 2022-05-24 · CVE-2019-10134

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7 Moodle version 3.6.4 and earlier Moodle version 3.5.6 and earlier Moodle version 3.4.9 and earlier Moodle version 3.1.18 and earlier

Description: A flaw was found in the handling of private file uploads via email. The size of these uploads was not correctly checked, allowing users' quota allowance to be exceeded.

Recommendations: For versions prior to 3.7, update to version 3.7 or later to resolve the issue. For version 3.6.4 and earlier, update to version 3.6.5 or later to resolve the issue. For version 3.5.6 and earlier, update to version 3.5.7 or later to resolve the issue. For version 3.4.9 and earlier, update to version 3.4.10 or later to resolve the issue. For version 3.1.18 and earlier, update to version 3.1.19 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2019-2080

ALT-PU-2019-2096

CVE-2019-10134

GHSA-J8WR-7XXJ-C2FR

Produtos afetados

Alt Linux

Moodle

Referências · 9

• https://github.com/moodle/moodle · Nota
• https://osv.dev/vulnerability/GHSA-j8wr-7xxj-c2fr · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-10134 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-10134 · Nota de Segurança
• https://moodle.org/mod/forum/discuss.php?d=386524 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10134 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-10134 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-10134 · Aviso do Fabricante