~ / search / GHSA-m37g-mwcg-7j7v

GHSA-m37g-mwcg-7j7v

Moodle Improper Encoding or Escaping of Output

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-40694

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.9, < 3.9.10 3.9.10
Packagist moodle/moodle >= 3.10, < 3.10.7 3.10.7
Packagist moodle/moodle >= 3.11, < 3.11.3 3.11.3

Details

As written in the advisory (Markdown source, shown as plain text).

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.

References

External links from the advisory. They lead to third-party sites.