Description

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

Remediation

References

CVE-2019-10134

Related Vulnerabilities

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-2986)

Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7464)

Internet Information Services Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-7269)

MediaWiki Incorrect Default Permissions Vulnerability (CVE-2011-4361)

PHP Other Vulnerability (CVE-2003-0861)

Severity

Low

Classification

CVE-2019-10134 CWE-20 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities