Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...
4CVSS6.4AI score0.00918EPSS
SaveExploits0References1
Hacker One•added 2024/08/22 2:0 p.m.•85 views
GitLab: Login email verification bypass via `/oauth/token`.
