Mahara 15.10.4
Approved changes feed: RSS · Atom
cpe:2.3:a:mahara:mahara:15.10.4:*:*:*:*:*:*:*
part: a version: 15.10.4 update: *
| Vendor | Mahara (07d8f057-c7ff-5103-941c-641bef17cee0) |
|---|---|
| Product | Mahara (e34a4551-28da-5ed2-b032-aa35dad26cc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/maharaproject/mahara |
purl2cpe | 2026-06-01 10:17:27.260611 |
pkg:mahara/mahara/mahara |
purl2cpe | 2026-06-01 10:17:27.260613 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1000156 |
vulnerable | 2026-06-08 05:08:34.180450 |
Details available
Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any group member even when they didn't have the admin role.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.015Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000153 |
vulnerable | 2026-06-08 05:08:34.177034 |
Details available
Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email can be used to gain access to the user's account.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.128Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000151 |
vulnerable | 2026-06-08 05:08:34.171646 |
Details available
Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.009Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.