Описание
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.
Ссылки
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.1.0 (включая) до 4.1.12 (исключая)Версия от 4.2.0 (включая) до 4.2.9 (исключая)Версия от 4.3.0 (включая) до 4.3.6 (исключая)Версия от 4.4.0 (включая) до 4.4.2 (исключая)
Одно из
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
EPSS
Процентиль: 22%
0.0007
Низкий
7.5 High
CVSS3
Дефекты
CWE-1287
Связанные уязвимости
CVSS3: 7.5
ubuntu
9 месяцев назад
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.
CVSS3: 7.5
debian
9 месяцев назад
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notatio ...
CVSS3: 7.5
github
9 месяцев назад
Moodle has arbitrary file read risk through pdfTeX
EPSS
Процентиль: 22%
0.0007
Низкий
7.5 High
CVSS3
Дефекты
CWE-1287