2347367 – (CVE-2025-26525) CVE-2025-26525 moodle: Arbitrary file read risk through pdfTeX

Bug 2347367 (CVE-2025-26525) - CVE-2025-26525 moodle: Arbitrary file read risk through pdfTeX

Summary: CVE-2025-26525 moodle: Arbitrary file read risk through pdfTeX

Keywords:
Status:	NEW
Alias:	CVE-2025-26525
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2347404 2347405
Blocks:
TreeView+	depends on / blocked

Reported:	2025-02-24 20:01 UTC by OSIDB Bzimport
Modified:	2025-02-24 21:37 UTC (History)
CC List:	0 users
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2025-02-24 20:01:12 UTC

Insufficient sanitizing in the TeX notation filter resulted in an 
arbitrary file read risk on sites where pdfTeX is available (such as 
those with TeX Live installed).

Note You need to log in before you can comment on or make changes to this bug.