In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1,... · CVE-2022-24111 · GitHub Advisory Database · GitHub

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1,...

Moderate severity Unreviewed Published Feb 11, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.

References

Published by the National Vulnerability Database

Feb 10, 2022

Published to the GitHub Advisory Database Feb 11, 2022

Last updated Feb 3, 2023