Design/Logic Flaw

2022-11-0617:15:00

PRIOn knowledge base

www.prio-n.com

mahara

security flaw

image access

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

JSON

In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images are accessible without a sufficient permission check under certain conditions.

CPENameOperatorVersion
maharaeq22.10.0 rc1
maharage22.04.0
maharalt22.04.3
maharage21.10.0
maharalt21.10.5
maharage21.04.0
maharalt21.04.7

Name	Operator	Version
mahara	eq	22.10.0 rc1
mahara	ge	22.04.0
mahara	lt	22.04.3
mahara	ge	21.10.0
mahara	lt	21.10.5
mahara	ge	21.04.0
mahara	lt	21.04.7

References

bugs.launchpad.net/mahara/+bug/1991157

mahara.org/interaction/forum/topic.php?id=9199