Mahara < 20.04.5, 20.10.x < 20.10.3, 21.4.x < 21.04.2 Multiple Vulnerabilities

Mahara is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if description...

CVE-2021-40848

creationtimestamp| type| source ---|---|--- 2021-11-03 13:23:32+00:00| seen| https://t.me/cibsecurity/31708...

CVE-2021-40848

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection...

CVE-2021-40848

Summary: CVE-2021-40848 affects Mahara. Exports in Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0 may produce CSV files containing characters that a spreadsheet can interpret as commands, enabling execution of a malicious string locally on a device (CSV injection). Root cause: crafted conte...