In Mahara 18.10 prior to 18.10.5, 19.04 prior to 19.04.4, and 19.10 prior to 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mahara mahara |