Lucene search

K
cvelistRedhatCVELIST:CVE-2021-40694
HistoryJan 21, 2022 - 6:17 p.m.

CVE-2021-40694

2022-01-2118:17:34
redhat
www.cve.org
6
cve-2021-40694
site administrators
http server account
read files

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

28.4%

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.

CNA Affected

[
  {
    "product": "moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "3.11 to 3.11.2, 3.10 to 3.10.6, 3.9 to 3.9.9 and earlier unsupported versions"
      }
    ]
  }
]

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

28.4%