Mahara 15.10.5
Approved changes feed: RSS · Atom
cpe:2.3:a:mahara:mahara:15.10.5:*:*:*:*:*:*:*
part: a version: 15.10.5 update: *
| Vendor | Mahara (07d8f057-c7ff-5103-941c-641bef17cee0) |
|---|---|
| Product | Mahara (e34a4551-28da-5ed2-b032-aa35dad26cc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/maharaproject/mahara |
purl2cpe | 2026-06-01 10:17:27.260614 |
pkg:mahara/mahara/mahara |
purl2cpe | 2026-06-01 10:17:27.260615 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1000153 |
vulnerable | 2026-06-08 05:08:34.178122 |
Details available
Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email can be used to gain access to the user's account.
Published: 2017-11-03T18:00:00.000Z
Updated: 2024-08-05T21:53:07.128Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.