What is GHSA-j8wr-7xxj-c2fr?

GHSA-j8wr-7xxj-c2fr is a security advisory published by GitHub Security Advisories with Medium severity. Moodle Private files uploaded via incoming mail processing could bypass quota restrictions

Which CVE IDs does GHSA-j8wr-7xxj-c2fr cover?

GHSA-j8wr-7xxj-c2fr covers the following CVE IDs: CVE-2019-10134. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j8wr-7xxj-c2fr?

GHSA-j8wr-7xxj-c2fr has a CVSS v3 base score of 4.2, published by GitHub Security Advisories.

Which products are affected by GHSA-j8wr-7xxj-c2fr?

GHSA-j8wr-7xxj-c2fr affects 4 products, including: composer/moodle/moodle:\u003e= 3.6, \u003c 3.6.4; composer/moodle/moodle:\u003e= 3.5, \u003c 3.5.6; composer/moodle/moodle:\u003e= 3.4, \u003c 3.4.9; composer/moodle/moodle:\u003e= 3.1, \u003c 3.1.18.

GHSA-j8wr-7xxj-c2frMediumCVSS 4.2

Moodle Private files uploaded via incoming mail processing could bypass quota restrictions

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 23, 2024

🔗 CVE IDs covered (1)

CVE-2019-10134 →

📋 Description

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

🎯 Affected products4

composer/moodle/moodle:>= 3.6, < 3.6.4
composer/moodle/moodle:>= 3.5, < 3.5.6
composer/moodle/moodle:>= 3.4, < 3.4.9
composer/moodle/moodle:>= 3.1, < 3.1.18

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-10134
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134
https://moodle.org/mod/forum/discuss.php?d=386524
https://github.com/advisories/GHSA-j8wr-7xxj-c2fr