In Mahara 19.04 prior to 19.04.5 and 19.10 prior to 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mahara mahara |
||
mahara mahara 20.04 |