CVE-2021-43266

2021-11-0222:15:09

Google

osv.dev

mahara

pdf export

code execution

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

53.1%

JSON

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution