4.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.7%
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore.
bugs.launchpad.net/mahara/+bug/1840201
mahara.org/interaction/forum/topic.php?id=8589