Vulnerability Bulletins |
MSA-25-0001: Arbitrary file read risk through pdfTeX |
|
| Affected software | PHP |
|
by Michael Hawkins. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).Severity/Risk:SeriousVersions affected:4.5 to 4.5.1, 4.4 to 4.4.5, 4.3 to 4.3.9, 4.1 to 4.1.15 and earlier unsupported versionsVersions fixed:4.5.2, 4.4.6, 4.3.10 and 4.1.16Reported by:vicevirusCVE identifier:CVE-2025-26525Changes More info: https://moodle.org/mod/forum/discuss.php?d=466141&parent=1871271 |
|