Moodle · Moodle · CVE-2019-10134
Name of the Vulnerable Software and Affected Versions:
Moodle versions prior to 3.7
Moodle version 3.6.4 and earlier
Moodle version 3.5.6 and earlier
Moodle version 3.4.9 and earlier
Moodle version 3.1.18 and earlier
Description:
A flaw was found in the handling of private file uploads via email. The size of these uploads was not correctly checked, allowing users' quota allowance to be exceeded.
Recommendations:
For versions prior to 3.7, update to version 3.7 or later to resolve the issue.
For version 3.6.4 and earlier, update to version 3.6.5 or later to resolve the issue.
For version 3.5.6 and earlier, update to version 3.5.7 or later to resolve the issue.
For version 3.4.9 and earlier, update to version 3.4.10 or later to resolve the issue.
For version 3.1.18 and earlier, update to version 3.1.19 or later to resolve the issue.