4.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.4%
Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on.
bugs.launchpad.net/mahara/+bug/1692749