In Mahara 21.04 prior to 21.04.3 and 21.10 prior to 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mahara mahara |
||
mahara mahara 21.10.0 |