CVE-2011-2774

2022-10-0316:15:16

mitre

www.cve.org

mahara

remote authenticated users

message reading

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.0%

JSON

The “Reply to message” feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter.

References

secunia.com/advisories/46719

launchpad.net/bugs/798128

launchpad.net/mahara/+milestone/1.4.1