GCVE - cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*

part: a version: 15.04.12 update: *

Vendor	Mahara (`07d8f057-c7ff-5103-941c-641bef17cee0`)
Product	Mahara (`e34a4551-28da-5ed2-b032-aa35dad26cc2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/maharaproject/mahara`	purl2cpe	2026-06-01 10:17:27.260555
`pkg:mahara/mahara/mahara`	purl2cpe	2026-06-01 10:17:27.260557

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9551`	vulnerable	2026-06-08 05:10:10.126577	Details available Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable to a user submitting potential dangerous payload, e.g. XSS code, to be saved as their name in the usr_registration table. The values are then emailed to the the user and administrator and if accepted become part of the new user's account. Published: 2017-09-25T16:00:00.000Z Updated: 2024-08-05T17:11:02.148Z Open on db.gcve.eu Reference links https://mahara.org/interaction/forum/topic.php?id=8040 https://bugs.launchpad.net/mahara/+bug/1697308	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15273`	vulnerable	2026-06-08 05:08:58.190395	Details available Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as titles in internal artefacts. Published: 2017-10-31T18:00:00.000Z Updated: 2024-08-05T19:50:16.432Z Open on db.gcve.eu Reference links https://mahara.org/interaction/forum/topic.php?id=8081 https://bugs.launchpad.net/mahara/+bug/1719480 https://bugs.launchpad.net/mahara/+bug/1719472 https://bugs.launchpad.net/mahara/+bug/1720034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14752`	vulnerable	2026-06-08 05:08:57.422297	Details available Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara. Published: 2017-10-31T18:00:00.000Z Updated: 2024-08-05T19:34:39.986Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/mahara/+bug/1719491	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14163`	vulnerable	2026-06-08 05:08:49.420590	Details available An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account. Published: 2017-10-31T18:00:00.000Z Updated: 2024-08-05T19:20:41.466Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/mahara/+bug/1701978	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000157`	vulnerable	2026-06-08 05:08:34.188955	Details available Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on. Published: 2017-11-03T18:00:00.000Z Updated: 2024-08-05T21:53:07.011Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/mahara/+bug/1692749	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.