CVE-2013-4431

Published: May 19, 2014Modified: May 6, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request.

Affected (24)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Up to 1.5.11
Mahara Mahara	Version 1.5.0
Mahara Mahara	Version 1.5.10
Mahara Mahara	Version 1.5.1
Mahara Mahara	Version 1.5.2
Mahara Mahara	Version 1.5.3
Mahara Mahara	Version 1.5.4
Mahara Mahara	Version 1.5.6
Mahara Mahara	Version 1.5.7
Mahara Mahara	Version 1.5.8
Mahara Mahara	Version 1.5.9
Mahara Mahara	Version 1.5 rc1
Mahara Mahara	Version 1.5 rc2

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.7.0
Mahara Mahara	Version 1.7.1
Mahara Mahara	Version 1.7.2
Mahara Mahara	Version 1.7. rc1

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.6.0
Mahara Mahara	Version 1.6.1
Mahara Mahara	Version 1.6.2
Mahara Mahara	Version 1.6.3
Mahara Mahara	Version 1.6.4
Mahara Mahara	Version 1.6.5
Mahara Mahara	Version 1.6.6