In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents are affected.)
References
| Link | Resource |
|---|---|
| https://bugs.launchpad.net/mahara/+bug/1952808 | Exploit Issue Tracking Third Party Advisory |
| https://mahara.org/interaction/forum/topic.php?id=8994 | Vendor Advisory |
| https://bugs.launchpad.net/mahara/+bug/1952808 | Exploit Issue Tracking Third Party Advisory |
| https://mahara.org/interaction/forum/topic.php?id=8994 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugs.launchpad.net/mahara/+bug/1952808 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://mahara.org/interaction/forum/topic.php?id=8994 - Vendor Advisory |
11 Feb 2022, 20:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://bugs.launchpad.net/mahara/+bug/1952808 - Exploit, Issue Tracking, Third Party Advisory | |
| References | (MISC) https://mahara.org/interaction/forum/topic.php?id=8994 - Vendor Advisory | |
| CWE | CWE-552 | |
| CPE | cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:* cpe:2.3:a:mahara:mahara:21.10.0:rc2:*:*:*:*:*:* cpe:2.3:a:mahara:mahara:21.10.0:rc1:*:*:*:*:*:* cpe:2.3:a:mahara:mahara:21.10.0:-:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 4.3 |
10 Feb 2022, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Feb 2022, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-02-09 05:15
Updated : 2024-11-21 06:50
NVD link : CVE-2022-24694
Mitre link : CVE-2022-24694
CVE.ORG link : CVE-2022-24694
JSON object : View
Products Affected
mahara
- mahara
CWE
CWE-552
Files or Directories Accessible to External Parties