PT-2011-3102

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 1.3.6 Description The issue allows remote authenticated users to obtain sensitive information via certain requests. This is due to the improper restriction of data in responses to AJAX calls. The affected API endpoints...