CVE-2017-1000145

Published: Nov 3, 2017Modified: May 13, 2026

4.9

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.

Affected (18)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.9.0
Mahara Mahara	Version 1.9.1
Mahara Mahara	Version 1.9.2
Mahara Mahara	Version 1.9.3
Mahara Mahara	Version 1.9.4
Mahara Mahara	Version 1.9.5
Mahara Mahara	Version 1.9.6
Mahara Mahara	Version 1.9 rc1

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.10.0
Mahara Mahara	Version 1.10.1
Mahara Mahara	Version 1.10.2
Mahara Mahara	Version 1.10.3
Mahara Mahara	Version 1.10.4
Mahara Mahara	Version 1.10 rc1

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 15.04.0
Mahara Mahara	Version 15.04.1
Mahara Mahara	Version 15.04 rc1
Mahara Mahara	Version 15.04 rc2

References (2)

https://bugs.launchpad.net/mahara/+bug/1460368

Source: cve@mitre.org

ExploitIssue TrackingPatchThird Party Advisory

https://bugs.launchpad.net/mahara/+bug/1460368

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

Timeline

No history available yet.