8.6

CVE-2025-26525

Arbitrary file read risk through pdfTeX

Arbitrary file read risk through pdfTeX

Insufficient sanitizing in the TeX notation filter resulted in an 
arbitrary file read risk on sites where pdfTeX is available (such as 
those with TeX Live installed).
Mögliche Gegenmaßnahme
Moodle Server: Update to a patched version.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moodle ≫ Moodle Version >= 4.1.0 < 4.1.16
Moodle ≫ Moodle Version >= 4.3.0 < 4.3.10
Moodle ≫ Moodle Version >= 4.4.0 < 4.4.6
Moodle ≫ Moodle Version >= 4.5.0 < 4.5.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Weitere Schwachstelleninformationen
SystemMoodle
≫
Produkt Moodle Server
Version < 4.1.0
Version >= 4.5.0, < 4.5.2
Version >= 4.4.0, < 4.4.6
Version >= 4.3.0, < 4.3.10
Version >= 4.1.0, < 4.1.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.438
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
patrick@puiterwijk.org 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CWE-552 Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.