CVE-2022-29584

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets CSS class for embedly is used, and JavaScript code is constructed to perform an action...

CVE-2022-29584

CVE-2022-29584 affects Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0. The issue is a stored XSS triggered when a specific embedly-related CSS class is used and JavaScript is constructed to perform an action. The available connected documents confirm the vulnerability and affected versions ...

PT-2022-19296 · Mahara · Mahara

Name of the Vulnerable Software and Affected Versions: Mahara versions prior to 20.10.5 Mahara versions prior to 21.04.4 Mahara versions prior to 21.10.2 Mahara versions prior to 22.04.0 Description: The issue is related to Cross Site Request Forgery CSRF because randomly generated tokens are too...

CVE-2022-28892

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery CSRF because randomly generated tokens are too easily guessable...

Mahara 跨站请求伪造漏洞

Mahara is a free and open source web-based ePortfolio management system from Mahara. Mahara suffers from a security vulnerability that stems from randomly generated tokens that are too easy to guess and are susceptible to cross-site request forgery CSRF attacks. The following products and version...

Mahara 跨站脚本漏洞

Mahara is a free and open source web-based ePortfolio management system from Mahara. A cross-site scripting vulnerability previously existed in Mahara versions 20.10.5, 21.04.4, 21.10.2, and 22.04.0, which stemmed from a cross-site scripting vulnerability that the application allowed to be stored...

CVE-2022-28892

Mahara is affected by a CSRF vulnerability in versions prior to 20.10.5, 21.04.4, 21.10.2, and 22.04.0. The root cause is that randomly generated CSRF tokens are too easily guessable, enabling cross-site request forgery under the stated versions. Affected product is Mahara (eportfolio software). ...

Mahara 安全漏洞

Mahara is a free and open source Web-based electronic archive management system from Mahara. security vulnerabilities exist in versions prior to Mahara 20.10.5, 21.04.4, 21.10.2 and 22.04.0, which stem from the fact that sites in the application with isolated organizations are vulnerable to attac...

CVE-2022-28892

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery CSRF because randomly generated tokens are too easily guessable...

Mahara 21.4.x < 21.04.3, 21.10.x < 21.10.1 Information Disclosure Vulnerability

Mahara is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if...

CVE-2022-24111

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known...

CVE-2022-24111

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known...

Code injection

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known...

CVE-2022-24111

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known...

CVE-2022-24111

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known...

CVE-2022-24111

Summary: CVE-2022-24111 affects Mahara 21.04 prior to 21.04.3 and 21.10 prior to 21.10.1. The vulnerability allows portfolios (including group-based portfolios and site/institution-level portfolios) to be viewed without authentication if the URL is known, constituting an information-disclosure is...

Mahara < 20.10.4, 21.4.x < 21.04.3, 21.10.x < 21.10.1 Information Disclosure Vulnerability

Mahara is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if...

Catalyst IT Mahara 访问控制错误漏洞

Catalyst It Catalyst IT Mahara is a social networking system from Catalyst IT Catalyst It in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Mahara 21.04, which stems from combinations created in groups that are not shared with...

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...