Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mahara vulnerabilities and exploits
(subscribe to this query)
5.3
CVSSv3
CVE-2022-24111
In Mahara 21.04 prior to 21.04.3 and 21.10 prior to 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.
Mahara Mahara
Mahara Mahara 21.10.0
5.3
CVSSv3
CVE-2018-11565
Mahara 17.04 prior to 17.04.8 and 17.10 prior to 17.10.5 and 18.04 prior to 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information.
Mahara Mahara
Mahara Mahara 18.04.0
4.9
CVSSv3
CVE-2019-9708
An issue exists in Mahara 17.10 prior to 17.10.8, 18.04 prior to 18.04.4, and 18.10 prior to 18.10.1. A site administrator can suspend the system user (root), causing all users to be locked out from the system.
Mahara Mahara
4.9
CVSSv3
CVE-2017-1000145
Mahara 1.9 prior to 1.9.7 and 1.10 prior to 1.10.5 and 15.04 prior to 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.
Mahara Mahara 1.9.0
Mahara Mahara 1.9
Mahara Mahara 1.9.6
Mahara Mahara 1.9.2
Mahara Mahara 1.9.4
Mahara Mahara 1.9.5
Mahara Mahara 1.9.1
Mahara Mahara 1.9.3
Mahara Mahara 1.10.1
Mahara Mahara 1.10.3
Mahara Mahara 1.10
Mahara Mahara 1.10.0
Mahara Mahara 1.10.2
Mahara Mahara 1.10.4
Mahara Mahara 15.04
Mahara Mahara 15.04.0
Mahara Mahara 15.04.1
4.8
CVSSv3
CVE-2017-1000132
Mahara 1.8 prior to 1.8.7 and 1.9 prior to 1.9.5 and 1.10 prior to 1.10.3 and 15.04 prior to 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file.
Mahara Mahara 1.8.4
Mahara Mahara 1.8.0
Mahara Mahara 1.8
Mahara Mahara 1.8.6
Mahara Mahara 1.8.1
Mahara Mahara 1.8.2
Mahara Mahara 1.8.3
Mahara Mahara 1.8.5
Mahara Mahara 1.9.4
Mahara Mahara 1.9.1
Mahara Mahara 1.9.2
Mahara Mahara 1.9.3
Mahara Mahara 1.9
Mahara Mahara 1.9.0
Mahara Mahara 1.10.1
Mahara Mahara 1.10.2
Mahara Mahara 1.10
Mahara Mahara 1.10.0
Mahara Mahara 15.04
4.8
CVSSv3
CVE-2017-1000144
Mahara 1.9 prior to 1.9.6 and 1.10 prior to 1.10.4 and 15.04 prior to 15.04.1 are vulnerable to a site admin or institution admin being able to place HTML and Javascript into an institution display name, which will be displayed to other users unescaped on some Mahara system pages...
Mahara Mahara 1.9.3
Mahara Mahara 1.9
Mahara Mahara 1.9.4
Mahara Mahara 1.9.5
Mahara Mahara 1.9.1
Mahara Mahara 1.9.2
Mahara Mahara 1.9.0
Mahara Mahara 1.10.1
Mahara Mahara 1.10.2
Mahara Mahara 1.10.3
Mahara Mahara 1.10
Mahara Mahara 1.10.0
Mahara Mahara 15.04
Mahara Mahara 15.04.0
4.4
CVSSv3
CVE-2017-1000157
Mahara 15.04 prior to 15.04.13 and 16.04 prior to 16.04.7 and 16.10 prior to 16.10.4 and 17.04 prior to 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on.
Mahara Mahara 15.04.0
Mahara Mahara 15.04.2
Mahara Mahara 15.04.9
Mahara Mahara 15.04.11
Mahara Mahara 15.04
Mahara Mahara 15.04.12
Mahara Mahara 15.04.4
Mahara Mahara 15.04.5
Mahara Mahara 15.04.6
Mahara Mahara 15.04.7
Mahara Mahara 15.04.1
Mahara Mahara 15.04.3
Mahara Mahara 15.04.8
Mahara Mahara 15.04.10
Mahara Mahara 16.04.0
Mahara Mahara 16.04.2
Mahara Mahara 16.04
Mahara Mahara 16.04.4
Mahara Mahara 16.04.5
Mahara Mahara 16.04.6
Mahara Mahara 16.04.1
Mahara Mahara 16.04.3
4.3
CVSSv3
CVE-2022-24694
In Mahara 20.10 prior to 20.10.4, 21.04 prior to 21.04.3, and 21.10 prior to 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents are affected.)
Mahara Mahara
Mahara Mahara 21.10.0
4.3
CVSSv3
CVE-2020-9387
In Mahara 19.04 prior to 19.04.5 and 19.10 prior to 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.
Mahara Mahara
Mahara Mahara 20.04
4.3
CVSSv3
CVE-2020-9386
In Mahara 18.10 prior to 18.10.5, 19.04 prior to 19.04.4, and 19.10 prior to 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore.
Mahara Mahara
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »