CVE-2024-47192

An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files that they do not have permission to download...

CVE-2024-47192

An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files that they do not have permission to download...

CVE-2024-47192

The CVE affects Mahara versions 23.04.8 and 24.04.4, where a malicious export download URL can allow an attacker to download files without proper authorization. The underlying cause is exposed via an insecure export URL mechanism (import/export workflow) that does not enforce access checks for do...