Code injection

2017-11-0318:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

JSON

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user’s artefacts to be included in a Leap2a export of their own pages.

CPENameOperatorVersion
maharaeq15.4 rc1
maharaeq15.4 rc2
maharaeq15.04.7
maharaeq15.04.6
maharaeq15.04.5
maharaeq15.04.4
maharaeq15.04.3
maharaeq15.04.2
maharaeq15.04.1
maharaeq15.04.0

Name	Operator	Version
mahara	eq	15.4 rc1
mahara	eq	15.4 rc2
mahara	eq	15.04.7
mahara	eq	15.04.6
mahara	eq	15.04.5
mahara	eq	15.04.4
mahara	eq	15.04.3
mahara	eq	15.04.2
mahara	eq	15.04.1
mahara	eq	15.04.0

Rows per page:

1-10 of 181

References

bugs.launchpad.net/mahara/+bug/1234615