CVE-2025-26525: falha de alta gravidade em moodle
Arbitrary file read risk through pdfTeX
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.4%
Insufficient sanitizing in the TeX notation filter resulted in an
arbitrary file read risk on sites where pdfTeX is available (such as
those with TeX Live installed).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Moodle Project · moodleCVEs relacionadas — moodle
No mesmo produto, das mais perigosas para as menos.
CVE-2025-26533HIGHSQL injection risk in course search module list filterEPSS 0.6%CVE-2025-26529HIGHStored XSS risk in admin live logEPSS 0.5%CVE-2026-119553HIGHMoodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path TraversalEPSS 0.4%CVE-2025-26527MEDIUMNon-searchable tags can still be discovered on the tag search page and in the tags blockEPSS 0.4%CVE-2025-26530HIGHReflected XSS via question bank filterEPSS 0.4%CVE-2025-26526MEDIUMFeedback response viewing and deletions did not respect Separate Groups modeEPSS 0.3%