CVE-2022-29585

In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used. They are all shown from page 2 of the group results list rather than only being shown for the institution that the viewer is a member of...

CVE-2022-29585

CVE-2022-29585 affects Mahara versions prior to 20.10.5, 21.04.4, 21.10.2, and 22.04.0. The issue arises in sites using Isolated Institutions where, when more than ten groups are used, all groups are listed on page 2 of the group results instead of only those belonging to the viewer’s institution...