CVE-2017-1000142

Published: Nov 3, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation.

Affected (21)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.8.0
Mahara Mahara	Version 1.8.1
Mahara Mahara	Version 1.8.2
Mahara Mahara	Version 1.8.3
Mahara Mahara	Version 1.8.4
Mahara Mahara	Version 1.8.5
Mahara Mahara	Version 1.8.6
Mahara Mahara	Version 1.8 rc1
Mahara Mahara	Version 1.8 rc2

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.9.0
Mahara Mahara	Version 1.9.1
Mahara Mahara	Version 1.9.2
Mahara Mahara	Version 1.9.3
Mahara Mahara	Version 1.9.4
Mahara Mahara	Version 1.9 rc1

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.10.0
Mahara Mahara	Version 1.10.1
Mahara Mahara	Version 1.10.2
Mahara Mahara	Version 1.10 rc1

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 15.04 rc1
Mahara Mahara	Version 15.04 rc2

References (2)

https://bugs.launchpad.net/mahara/+bug/1425306

Source: cve@mitre.org

ExploitIssue TrackingPatchThird Party Advisory

https://bugs.launchpad.net/mahara/+bug/1425306

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

Timeline

No history available yet.