GCVE - cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*

part: a version: 15.04.4 update: *

Vendor	Mahara (`07d8f057-c7ff-5103-941c-641bef17cee0`)
Product	Mahara (`e34a4551-28da-5ed2-b032-aa35dad26cc2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/maharaproject/mahara`	purl2cpe	2026-06-01 10:17:27.260571
`pkg:mahara/mahara/mahara`	purl2cpe	2026-06-01 10:17:27.260572

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9551`	vulnerable	2026-06-08 05:10:10.122518	Details available Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable to a user submitting potential dangerous payload, e.g. XSS code, to be saved as their name in the usr_registration table. The values are then emailed to the the user and administrator and if accepted become part of the new user's account. Published: 2017-09-25T16:00:00.000Z Updated: 2024-08-05T17:11:02.148Z Open on db.gcve.eu Reference links https://mahara.org/interaction/forum/topic.php?id=8040 https://bugs.launchpad.net/mahara/+bug/1697308	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15273`	vulnerable	2026-06-08 05:08:58.190255	Details available Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as titles in internal artefacts. Published: 2017-10-31T18:00:00.000Z Updated: 2024-08-05T19:50:16.432Z Open on db.gcve.eu Reference links https://mahara.org/interaction/forum/topic.php?id=8081 https://bugs.launchpad.net/mahara/+bug/1719480 https://bugs.launchpad.net/mahara/+bug/1719472 https://bugs.launchpad.net/mahara/+bug/1720034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14752`	vulnerable	2026-06-08 05:08:57.418305	Details available Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara. Published: 2017-10-31T18:00:00.000Z Updated: 2024-08-05T19:34:39.986Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/mahara/+bug/1719491	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14163`	vulnerable	2026-06-08 05:08:49.416740	Details available An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account. Published: 2017-10-31T18:00:00.000Z Updated: 2024-08-05T19:20:41.466Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/mahara/+bug/1701978	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000157`	vulnerable	2026-06-08 05:08:34.181080	Details available Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on. Published: 2017-11-03T18:00:00.000Z Updated: 2024-08-05T21:53:07.011Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/mahara/+bug/1692749	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000156`	vulnerable	2026-06-08 05:08:34.180226	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000155`	vulnerable	2026-06-08 05:08:34.179568	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000154`	vulnerable	2026-06-08 05:08:34.178892	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000153`	vulnerable	2026-06-08 05:08:34.172956	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000152`	vulnerable	2026-06-08 05:08:34.172218	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000151`	vulnerable	2026-06-08 05:08:34.166010	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000150`	vulnerable	2026-06-08 05:08:34.165430	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000149`	vulnerable	2026-06-08 05:08:34.164873	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000148`	vulnerable	2026-06-08 05:08:34.158363	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000133`	vulnerable	2026-06-08 05:08:34.114251	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000131`	vulnerable	2026-06-08 05:08:34.097446	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.