VULNERABILITY INTELLIGENCE
CVE-2019-10134
CVSS score3.7 LOW
EPSS probability1.05%
CISA KEVNot currently listed
Published2019-06-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- secalert@redhat.com — Issue Tracking, Third Party Advisory
- secalert@redhat.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory