CVE-2019-10134

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

Score

CVSS 3.0 4.2 Medium

Status

Modified - secalert@redhat.com

Published

2019-06-26

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Moodle (Moodle)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134
• https://moodle.org/mod/forum/discuss.php?d=386524