Code injection

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

CVE-2009-2171 affects Mahara 1.1 prior to 1.1.5. The root cause is missing permission checks when saving a view that contains artefacts, enabling remote authenticated users to read another user’s artefact (information disclosure). The issue is documented across multiple feeds (NVD entry and Red H...