Mahara 15.10.0
Approved changes feed: RSS · Atom
cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*
part: a version: 15.10.0 update: *
| Vendor | Mahara (07d8f057-c7ff-5103-941c-641bef17cee0) |
|---|---|
| Product | Mahara (e34a4551-28da-5ed2-b032-aa35dad26cc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/maharaproject/mahara |
purl2cpe | 2026-06-01 10:17:27.260598 |
pkg:mahara/mahara/mahara |
purl2cpe | 2026-06-01 10:17:27.260599 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1000156 |
vulnerable | 2026-06-08 05:08:34.180387 |
Details available
Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any group member even when they didn't have the admin role.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.015Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000155 |
vulnerable | 2026-06-08 05:08:34.179696 |
Details available
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being accessed without any access control checks consequently allowing any of a user's uploaded profile pictures to be viewable by anyone, whether or not they were currently selected as the "default" or used in any pages.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.145Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000154 |
vulnerable | 2026-06-08 05:08:34.179022 |
Details available
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Mahara's built-in login form, still allowing users to log in even if their institution was expired or suspended.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.053Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000153 |
vulnerable | 2026-06-08 05:08:34.176952 |
Details available
Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email can be used to gain access to the user's account.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.128Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000152 |
vulnerable | 2026-06-08 05:08:34.172386 |
Details available
Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separate computer as the same session ID is served. This situation can occur when a user takes an action that forces another user to be logged out of Mahara, such as an admin changing another user's account settings.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.109Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000151 |
vulnerable | 2026-06-08 05:08:34.170631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000150 |
vulnerable | 2026-06-08 05:08:34.165478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000149 |
vulnerable | 2026-06-08 05:08:34.162212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000148 |
vulnerable | 2026-06-08 05:08:34.158495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000133 |
vulnerable | 2026-06-08 05:08:34.114384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000131 |
vulnerable | 2026-06-08 05:08:34.101578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.