CVE-2024-43426
Fixed upstream EPSS <1%CVSS 7.5
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.
Products: Moodle
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | moodle/moodle | 4.1.12 |
| Packagist | moodle/moodle | 4.2.9 |
| Packagist | moodle/moodle | 4.3.6 |
| Packagist | moodle/moodle | 4.4.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 16.04 LTS | moodle | no fix |
| Ubuntu Pro 18.04 LTS | moodle | no fix |