CVE-2022-33913

In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check...

Mahara 20.04.x < 21.04.6, 21.10.x < 21.10.4, 22.04.x < 22.04.2 Information Disclosure Vulnerability

Mahara is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if...

CVE-2022-33913

creationtimestamp| type| source ---|---|--- 2022-06-20 20:26:36+00:00| seen| https://t.me/cibsecurity/44839...

CVE-2022-33913

CVE-2022-33913 affects Mahara: versions 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2; the issue allows files to be downloaded through thumb.php without a permission check. The Red Hat and OpenVAS datasets corroborate the same description. The root cause is missing access control on thu...