Mahara 1.1 prior to 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mahara mahara 1.1.1 |
||
mahara mahara 1.1.3 |
||
mahara mahara 1.1.4 |
||
mahara mahara 1.1 |
||
mahara mahara 1.1.2 |
Vulmon