CVE-2017-1000143

Published: Nov 3, 2017Modified: May 13, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore.

Affected (21)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.8.0
Mahara Mahara	Version 1.8.1
Mahara Mahara	Version 1.8.2
Mahara Mahara	Version 1.8.3
Mahara Mahara	Version 1.8.4
Mahara Mahara	Version 1.8.5
Mahara Mahara	Version 1.8.6
Mahara Mahara	Version 1.8 rc1
Mahara Mahara	Version 1.8 rc2

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.9.0
Mahara Mahara	Version 1.9.1
Mahara Mahara	Version 1.9.2
Mahara Mahara	Version 1.9.3
Mahara Mahara	Version 1.9.4
Mahara Mahara	Version 1.9 rc1