CVE-2021-40694

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.

Score

CVSS 3.1 4.9 Medium

Status

Modified - secalert@redhat.com

Published

2022-09-29

Last modified

2024-08-04

Weaknesses

CWE-116

Affected products

• Moodle (Moodle)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2043421