VYPR
High severity7.5OSV Advisory· Published Nov 7, 2024· Updated Jun 17, 2026

CVE-2024-43426

CVE-2024-43426

Description

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
moodle/moodlePackagist
< 4.1.124.1.12
moodle/moodlePackagist
>= 4.2.0-beta, < 4.2.94.2.9
moodle/moodlePackagist
>= 4.3.0-beta, < 4.3.64.3.6
moodle/moodlePackagist
>= 4.4.0-beta, < 4.4.24.4.2

Affected products

4
  • Moodle/MoodleOSV2 versions
    v4.1.0, v4.1.1, v4.1.10, …+ 1 more
    • (no CPE)range: v4.1.0, v4.1.1, v4.1.10, …
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=4.1.0,<4.1.12
  • osv-coords2 versions
    >= 4.1.0, < 4.1.12+ 1 more
    • (no CPE)range: >= 4.1.0, < 4.1.12
    • (no CPE)range: < 4.1.12

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.