Browse CVEs

MEDIUM 5.9 CVE-2017-17455 Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to intera… Mahara 16.10.7 / 17.04.5+ Fix from $1,6002018-02-20 MEDIUM 5.4 CVE-2017-17454 Mahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site Scripting (XSS) vulnerability when a user enters inva… Mahara 16.10.7 / 17.04.5+ Fix from $1,6002018-02-20 MEDIUM 6.5 CVE-2017-1000141 An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could discontinue a user's ability to maintain their own account (… Mahara 18.10.0+ Fix from $1,6002018-01-30 CRITICAL 9.8 CVE-2017-1000153 Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset li… Mahara Patch available Fix from $2,3002017-11-03 CRITICAL 9.8 CVE-2017-1000154 Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Mahara'… Mahara Patch available Fix from $2,3002017-11-03 CRITICAL 9.8 CVE-2017-1000171 Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text. Mahara Mobile after 1.2.0 Fix from $2,3002017-11-03 MEDIUM 6.5 CVE-2017-1000156 Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any gr… Mahara Patch available Fix from $1,6002017-11-03 CRITICAL 9.8 CVE-2017-1000152 Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separate compute… Mahara Patch available Fix from $2,3002017-11-03 HIGH 8.8 CVE-2017-1000148 Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to PHP code execution as Mahara would pass portions of t… Mahara Patch available Fix from $1,9502017-11-03 HIGH 8.8 CVE-2017-1000150 Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes user… Mahara Patch available Fix from $1,9502017-11-03 HIGH 8.1 CVE-2017-1000134 Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose access to … Mahara Patch available Fix from $1,9502017-11-03 HIGH 8.0 CVE-2017-1000139 Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as… Mahara Patch available Fix from $1,9502017-11-03 HIGH 7.5 CVE-2017-1000133 Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's… Mahara Patch available Fix from $1,9502017-11-03 HIGH 7.5 CVE-2017-1000151 Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed… Mahara Patch available Fix from $1,9502017-11-03 MEDIUM 6.8 CVE-2017-1000147 Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the u… Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 6.5 CVE-2017-1000131 Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara account even … Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 6.5 CVE-2017-1000135 Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable as logged-in users can stay logged in aft… Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 6.5 CVE-2017-1000136 Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable to old sessions not being invalidated aft… Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 6.5 CVE-2017-1000142 Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submi… Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 5.4 CVE-2017-1000137 Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via the keyboar… Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 5.4 CVE-2017-1000138 Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when dragging/dropping files into a collection if … Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 5.4 CVE-2017-1000140 Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .xml file that c… Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 5.4 CVE-2017-1000146 Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to the arbitrary execution of Javascript in the browser of a l… Mahara Patch available Fix from $1,6002017-11-03 MEDIUM 5.4 CVE-2017-1000149 Mahara 1.10 before 1.10.9 and 15.04 before 15.04.6 and 15.10 before 15.10.2 are vulnerable to XSS due to window.opener (target="_blank" and window.op… Mahara Patch available Fix from $1,6002017-11-03 HIGH 8.8 CVE-2017-14163 An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser … Mahara Patch available Fix from $1,9502017-10-31 MEDIUM 5.4 CVE-2017-14752 Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential da… Mahara Patch available Fix from $1,6002017-10-31 MEDIUM 5.4 CVE-2017-15273 Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential da… Mahara Patch available Fix from $1,6002017-10-31 MEDIUM 6.1 CVE-2017-9551 Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable to a user submitting potential… Mahara Mitigation only Fix from $1,6002017-09-25 MEDIUM 5.5 CVE-2013-4431 Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users … Mahara after 1.5.11 Fix from $1,6002014-05-19 MEDIUM 6.8 CVE-2012-2246 Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF pr… Mahara Mitigation only Fix from $1,6002012-11-24