ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-40694

—
CVSS 3.1
4.9 medium
EPSS
<1%p58
Published
()
Modified
Description

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.

Vendors
moodle
Products
moodle
Weakness
CWE-116
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

No ingested article mentions this CVE yet.