Mahara 17.04 prior to 17.04.8 and 17.10 prior to 17.10.5 and 18.04 prior to 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara credentials.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mahara mahara |
||
mahara mahara 18.04.0 |
Vulmon