GCVE - cpe:2.3:a:mahara:mahara:18.04.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mahara:mahara:18.04.0:*:*:*:*:*:*:*

part: a version: 18.04.0 update: *

Vendor	Mahara (`07d8f057-c7ff-5103-941c-641bef17cee0`)
Product	Mahara (`e34a4551-28da-5ed2-b032-aa35dad26cc2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/maharaproject/mahara`	purl2cpe	2026-06-01 10:17:27.260882
`pkg:mahara/mahara/mahara`	purl2cpe	2026-06-01 10:17:27.260883

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-11565`	vulnerable	2026-06-08 05:10:38.671348	Details available Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information. Published: 2018-05-30T21:00:00.000Z Updated: 2024-08-05T08:10:14.659Z Open on db.gcve.eu Reference links https://mahara.org/interaction/forum/topic.php?id=8271 https://bugs.launchpad.net/mahara/+bug/1772774	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11196`	vulnerable	2026-06-08 05:10:37.956996	Details available Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected files into a Leap2A archive and uploading that to Mahara. In contrast to other ZIP files that are uploaded, ClamAV (when activated) does not check Leap2A archives for viruses, allowing malicious files to be available for download. While files cannot be executed on Mahara itself, Mahara can be used to transfer such files to user computers. Published: 2018-06-01T19:00:00.000Z Updated: 2024-08-05T08:01:52.145Z Open on db.gcve.eu Reference links https://mahara.org/interaction/forum/topic.php?id=8270 https://bugs.launchpad.net/bugs/1770535	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11195`	vulnerable	2026-06-08 05:10:37.956421	Details available Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara credentials. Published: 2018-06-01T19:00:00.000Z Updated: 2024-08-05T08:01:52.513Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/mahara/+bug/1770561 https://mahara.org/interaction/forum/topic.php?id=8269	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.