CVE-2017-1000134

Affected Mahara versions: 1.8 before 1.8.6, 1.9 before 1.9.4, 1.10 before 1.10.1, and 15.04 before 15.04.0. Issue: when a group member changes access permissions on uploaded group files, other group members can lose access to those files. Root cause is a group-file permissions problem within Maha...