CVE-2025-32320

In System UI, there is a possible way to view other users' images due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-47799

Mahara versions prior to 22.10.4 and 23.x prior to 23.04.4 are vulnerable to an information disclosure vulnerability. The root cause is that the experimental HTML bulk export feature fails to clear the cache after exporting files for an account. Consequently, exported files provided to account ho...