Description

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

Remediation

References

CVE-2019-10134

Related Vulnerabilities

PHP Other Vulnerability (CVE-2014-0236)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-9578)

Zope Web Application Server Other Vulnerability (CVE-2000-0725)

MySQL CVE-2022-21625 Vulnerability (CVE-2022-21625)

WordPress 3.7.x PHP Object Injection (3.7 - 3.7.35)

Severity

Low

Classification

CVE-2019-10134 CWE-20 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities