{"id":"CVE-2019-10134","state":"PUBLISHED","title":"A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could ","description":"A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.","publishedAt":"2019-06-26T18:14:38.000Z","updatedAt":"2024-08-04T22:10:10.031Z","severity":{"score":4.2,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","source":"redhat"},"assigner":"redhat","products":["Moodle moodle"],"affected":[{"vendor":"Moodle","product":"moodle","versions":[{"version":"3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134","https://moodle.org/mod/forum/discuss.php?d=386524"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T19:45:19.894Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/10xxx/CVE-2019-10134.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-10134","state":"PUBLISHED","datePublished":"2019-06-26T18:14:38.000Z","dateUpdated":"2024-08-04T22:10:10.031Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2019-03-27T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded."}],"affected":[{"vendor":"Moodle","product":"moodle","versions":[{"version":"3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134","tags":["x_refsource_CONFIRM"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=386524","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2019-06-26T18:14:38.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2019-10134","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"moodle","version":{"version_data":[{"version_value":"3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18"}]}}]},"vendor_name":"Moodle"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded."}]},"impact":{"cvss":[[{"vectorString":"4.2/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.0"}]]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-20"}]}]},"references":{"reference_data":[{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134"},{"name":"https://moodle.org/mod/forum/discuss.php?d=386524","refsource":"CONFIRM","url":"https://moodle.org/mod/forum/discuss.php?d=386524"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=386524","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T22:10:10.031Z"}}]}}}