GHSA-j8wr-7xxj-c2fr
Suggest an improvement- Source
- https://github.com/advisories/GHSA-j8wr-7xxj-c2fr
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-j8wr-7xxj-c2fr/GHSA-j8wr-7xxj-c2fr.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-j8wr-7xxj-c2fr
- Aliases
- Published
- 2022-05-24T16:48:40Z
- Modified
- 2024-04-23T23:58:48.862261Z
- Severity
-
- 4.2 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
- Summary
- Moodle Private files uploaded via incoming mail processing could bypass quota restrictions
- Details
-
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.
- Database specific
{ "nvd_published_at": "2019-06-26T19:15:00Z", "cwe_ids": [ "CWE-20" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-04-23T23:39:12Z" }- References
Affected packages
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle