CVE-2023-47799

Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental HTML bulk export is used via the administration interface or via the CLI, and the resulting export files are given to the account holders. They may contain images of other account holders because the...

CVE-2023-47799

The Mahara ePortfolio management system is vulnerable to information disclosure in versions prior to 22.10.4 and 23.x before 23.04.4 . The issue resides in the experimental HTML bulk export feature, which can be accessed via the administration interface or the Command Line Interface (CLI). The ro...

CVE-2023-47799: Exposure of Sensitive Information to an Unauthorized Actor

Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental HTML bulk export is used via the administration interface or via the CLI, and the resulting export files are given to the account holders. They may contain images of other account holders because the...