VYPR
← All advisories
Low severity3.7NVD Advisory· Published Jun 26, 2019· Updated Jun 17, 2026

CVE-2019-10134

CVE-2019-10134

Description

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
moodle/moodlePackagist
>= 3.6, < 3.6.43.6.4
moodle/moodlePackagist
>= 3.5, < 3.5.63.5.6
moodle/moodlePackagist
>= 3.4, < 3.4.93.4.9
moodle/moodlePackagist
>= 3.1, < 3.1.183.1.18

Affected products

3
  • Moodle/Moodlev52 versions
    3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18+ 1 more
    • (no CPE)range: 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=3.1.0,<=3.1.17
  • ghsa-coords
    pkg:composer/moodle/moodle
    Range: >= 3.6, < 3.6.4

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.