Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-10134

Fixed upstream EPSS 1%CVSS 4.2

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

Published 2019-06-26 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle3.6.4
Packagistmoodle/moodle3.5.6
Packagistmoodle/moodle3.4.9
Packagistmoodle/moodle3.1.18

Distro releases

ReleasePackageFixed in
Ubuntu:Pro:16.04:LTSmoodleno fix
Ubuntu:Pro:18.04:LTSmoodleno fix