CVE Vulnerabilities

CVE-2017-1000142

Published: Nov 03, 2017 | Modified: Jun 17, 2026
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation.

Affected Software

NameVendorStart VersionEnd Version
MaharaMahara1.8-rc1 (including)1.8-rc1 (including)
MaharaMahara1.8-rc2 (including)1.8-rc2 (including)
MaharaMahara1.8.0 (including)1.8.0 (including)
MaharaMahara1.8.1 (including)1.8.1 (including)
MaharaMahara1.8.2 (including)1.8.2 (including)
MaharaMahara1.8.3 (including)1.8.3 (including)
MaharaMahara1.8.4 (including)1.8.4 (including)
MaharaMahara1.8.5 (including)1.8.5 (including)
MaharaMahara1.8.6 (including)1.8.6 (including)

References