CVE-2019-10134

Опубликовано: 26 июн. 2019

Источник: nvd

CVSS3: 4.2

CVSS3: 3.7

CVSS2: 4.3

EPSS Низкий

Описание

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134
Issue Tracking
Third Party Advisory
https://moodle.org/mod/forum/discuss.php?d=386524
Patch
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134
Issue Tracking
Third Party Advisory
https://moodle.org/mod/forum/discuss.php?d=386524
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.1.0 (включая) до 3.1.17 (включая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.8 (включая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.5.0 (включая) до 3.5.5 (включая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.6.0 (включая) до 3.6.3 (включая)

EPSS

Процентиль: 40%

0.00179

Низкий

4.2 Medium

CVSS3

3.7 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-10134

CVSS3: 3.7

ubuntu

почти 6 лет назад

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

CVE-2019-10134

CVSS3: 3.7

debian

почти 6 лет назад

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. ...

GHSA-j8wr-7xxj-c2fr

CVSS3: 4.2

github

около 3 лет назад

Moodle Private files uploaded via incoming mail processing could bypass quota restrictions

EPSS

Процентиль: 40%

0.00179

Низкий

4.2 Medium

CVSS3

3.7 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

NVD-CWE-noinfo