Mahara < 20.04.5, 20.10.x < 20.10.3, 21.4.x < 21.04.2 Multiple Vulnerabilities

Mahara is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if description...

CVE-2021-40849

CVE-2021-40849 affects Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0. The account tied to a web services token can be exploited to log in, causing information disclosure (at minimum) and often privilege escalation. Affected: Mahara versions listed above. Root cause and specific exploit det...