CVE-2011-2774

Published: Nov 15, 2011Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter.

Affected (18)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.3.0
Mahara Mahara	Version 1.3.0 beta1
Mahara Mahara	Version 1.3.0 beta2
Mahara Mahara	Version 1.3.0 beta3
Mahara Mahara	Version 1.3.0 beta4
Mahara Mahara	Version 1.3.0 rc1
Mahara Mahara	Version 1.3.1
Mahara Mahara	Version 1.3.2
Mahara Mahara	Version 1.3.3
Mahara Mahara	Version 1.3.4
Mahara Mahara	Version 1.3.5
Mahara Mahara	Version 1.3.6
Mahara Mahara	Version 1.3.7
Mahara Mahara	Version 1.4.0
Mahara Mahara	Version 1.4 rc1
Mahara Mahara	Version 1.4 rc2
Mahara Mahara	Version 1.4 rc3
Mahara Mahara	Version 1.4 rc4