PT-2019-11590 · Moodle+1 · Moodle+1

Guillermo Leon Alvarez Salamanca · Published 2019-06-18 · Updated 2022-05-24 · CVE-2019-10134

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7 Moodle version 3.6.4 and earlier Moodle version 3.5.6 and earlier Moodle version 3.4.9 and earlier Moodle version 3.1.18 and earlier

Description: A flaw was found in the handling of private file uploads via email. The size of these uploads was not correctly checked, allowing users' quota allowance to be exceeded.

Recommendations: For versions prior to 3.7, update to version 3.7 or later to resolve the issue. For version 3.6.4 and earlier, update to version 3.6.5 or later to resolve the issue. For version 3.5.6 and earlier, update to version 3.5.7 or later to resolve the issue. For version 3.4.9 and earlier, update to version 3.4.10 or later to resolve the issue. For version 3.1.18 and earlier, update to version 3.1.19 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2019-2080

ALT-PU-2019-2096

CVE-2019-10134

GHSA-J8WR-7XXJ-C2FR

Affected Products

Alt Linux

Moodle

References · 9

• https://osv.dev/vulnerability/GHSA-j8wr-7xxj-c2fr · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-10134 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-10134 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=386524 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10134 · Security Note
• https://ubuntu.com/security/CVE-2019-10134 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-10134 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134 · Note