CVE Vulnerabilities

CVE-2017-1000142

Published: Nov 03, 2017 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation.

Affected Software

Name Vendor Start Version End Version
Mahara Mahara 1.8-rc1 (including) 1.8-rc1 (including)
Mahara Mahara 1.8-rc2 (including) 1.8-rc2 (including)
Mahara Mahara 1.8.0 (including) 1.8.0 (including)
Mahara Mahara 1.8.1 (including) 1.8.1 (including)
Mahara Mahara 1.8.2 (including) 1.8.2 (including)
Mahara Mahara 1.8.3 (including) 1.8.3 (including)
Mahara Mahara 1.8.4 (including) 1.8.4 (including)
Mahara Mahara 1.8.5 (including) 1.8.5 (including)
Mahara Mahara 1.8.6 (including) 1.8.6 (including)

References