CVE-2021-29349

CVE-2021-29349 CVE-2021-29349 CSRF to remove all messages in Mahara 20.10 Payload and Credit https://github.com/0xBaz...

EUVD-2026-60546

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...

EUVD-2026-60548

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

EUVD-2026-60549

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

CVE-2026-42164

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

CVE-2026-42162

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...

CVE-2026-42163

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

CVE-2026-42164: Exposure of Sensitive Information to an Unauthorized Actor

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

CVE-2026-42162: Improper Limitation of a Pathname to a Restricted Directory

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...

CVE-2026-42163: Improper Access Control

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

CVE-2026-42164

Mahara versions prior to 25.04.5 and 26.04.0 are vulnerable in the Text block/section functionality. A specifically crafted call can cause the system to recall backed-up content from a different Text section, leading to information disclosure . To remediate this vulnerability, users should update...

PT-2026-76869

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description An issue exists in the Text block/section functionality where a specifically crafted call allows the retrieval of backed-up content from a different Text section,...

CVE-2026-42164

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

PT-2026-76879

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description An issue exists where artefacts may become accessible to unauthorized users if the file path to an artefact within a page is manipulated. Recommendations Update to...

CVE-2026-42163

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

PT-2026-76868

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description Unauthorized access to internal accounts is possible via Learning Tools Interoperability LTI, which is a standard for connecting learning applications. This issue...

CVE-2026-42162

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...

CVE-2026-42162

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...

CVE-2026-42164

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

CVE-2026-42163

Versions of Mahara prior to 25.04.5 and 26.04.0 are vulnerable to unauthorized access to internal accounts. This security flaw occurs under certain circumstances when using Learning Tools Interoperability (LTI) , specifically affecting both LTI 1.1 and LTI 1.3 Advantage . While the vulnerability ...