Code injection

2020-03-0914:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the ‘Edit access’ screen when sharing portfolios.

CPENameOperatorVersion
maharage18.10.0
maharalt18.10.5
maharage19.04.0
maharalt19.04.4
maharage19.10.0
maharalt19.10.2

Name	Operator	Version
mahara	ge	18.10.0
mahara	lt	18.10.5
mahara	ge	19.04.0
mahara	lt	19.04.4
mahara	ge	19.10.0
mahara	lt	19.10.2

References

bugs.launchpad.net/mahara/+bug/1863043

mahara.org/interaction/forum/topic.php?id=8590