Approved changes feed: RSS · Atom
cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mahara (07d8f057-c7ff-5103-941c-641bef17cee0) |
|---|---|
| Product | Mahara (e34a4551-28da-5ed2-b032-aa35dad26cc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/maharaproject/mahara |
purl2cpe | 2026-06-01 10:17:27.260248 |
pkg:mahara/mahara/mahara |
purl2cpe | 2026-06-01 10:17:27.260250 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-29992 |
vulnerable | 2026-06-08 07:14:57.740415 |
Details available
Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.
Published: 2025-08-26T00:00:00.000Z
Updated: 2025-08-27T14:21:02.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47853 |
vulnerable | 2026-06-08 06:48:13.351149 |
Details available
An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability (LTI).
Published: 2025-08-26T00:00:00.000Z
Updated: 2025-09-22T15:34:08.992Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47192 |
vulnerable | 2026-06-08 06:48:11.565919 |
Details available
An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files that they do not have permission to download.
Published: 2025-08-26T00:00:00.000Z
Updated: 2025-08-27T16:22:16.133Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45753 |
vulnerable | 2026-06-08 06:48:08.987095 |
Details available
In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute.
Published: 2025-08-26T00:00:00.000Z
Updated: 2025-08-26T15:28:07.916Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39923 |
vulnerable | 2026-06-08 06:41:51.877237 |
Details available
An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting (XSS) due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in person.
Published: 2025-08-25T00:00:00.000Z
Updated: 2025-08-25T20:38:16.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39335 |
vulnerable | 2026-06-08 06:41:49.088751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35203 |
vulnerable | 2026-06-08 06:37:35.439476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47799 |
vulnerable | 2026-06-08 06:14:25.686136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45134 |
vulnerable | 2026-06-08 05:50:35.697598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45133 |
vulnerable | 2026-06-08 05:50:35.697037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44544 |
vulnerable | 2026-06-08 05:49:35.598166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42707 |
vulnerable | 2026-06-08 05:49:30.175783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33913 |
vulnerable | 2026-06-08 05:44:51.736842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29585 |
vulnerable | 2026-06-08 05:42:48.554548 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29584 |
vulnerable | 2026-06-08 05:42:48.554203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28892 |
vulnerable | 2026-06-08 05:42:46.040137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24694 |
vulnerable | 2026-06-08 05:41:01.387534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24111 |
vulnerable | 2026-06-08 05:40:59.624979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43266 |
vulnerable | 2026-06-08 05:36:43.026256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43265 |
vulnerable | 2026-06-08 05:36:43.025698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43264 |
vulnerable | 2026-06-08 05:36:43.025269 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40849 |
vulnerable | 2026-06-08 05:35:19.170486 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40848 |
vulnerable | 2026-06-08 05:35:19.168247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9387 |
vulnerable | 2026-06-08 05:28:01.509310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9386 |
vulnerable | 2026-06-08 05:28:01.508767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9282 |
vulnerable | 2026-06-08 05:27:21.098126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15907 |
vulnerable | 2026-06-08 05:19:27.155533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9709 |
vulnerable | 2026-06-08 05:14:26.134376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9708 |
vulnerable | 2026-06-08 05:14:26.133930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6182 |
vulnerable | 2026-06-08 05:11:53.406563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11565 |
vulnerable | 2026-06-08 05:10:38.671318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11196 |
vulnerable | 2026-06-08 05:10:37.956853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11195 |
vulnerable | 2026-06-08 05:10:37.955563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17455 |
vulnerable | 2026-06-08 05:09:09.458556 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17454 |
vulnerable | 2026-06-08 05:09:09.458130 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000141 |
vulnerable | 2026-06-08 05:08:34.139821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4432 |
vulnerable | 2026-06-08 05:04:46.703191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4431 |
vulnerable | 2026-06-08 05:04:46.702172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4430 |
vulnerable | 2026-06-08 05:04:46.694943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4429 |
vulnerable | 2026-06-08 05:04:36.175599 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1426 |
vulnerable | 2026-06-08 05:03:53.898970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2351 |
vulnerable | 2026-06-08 05:02:03.767669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2239 |
vulnerable | 2026-06-08 05:02:02.862284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2237 |
vulnerable | 2026-06-08 05:00:53.417613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4118 |
vulnerable | 2026-06-08 04:59:29.512212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2773 |
vulnerable | 2026-06-08 04:58:09.217035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2772 |
vulnerable | 2026-06-08 04:58:09.215178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2771 |
vulnerable | 2026-06-08 04:58:09.203494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1406 |
vulnerable | 2026-06-08 04:57:59.028340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1405 |
vulnerable | 2026-06-08 04:57:59.026263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1404 |
vulnerable | 2026-06-08 04:57:59.024294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1403 |
vulnerable | 2026-06-08 04:57:59.022410 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1402 |
vulnerable | 2026-06-08 04:57:58.983987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3871 |
vulnerable | 2026-06-08 04:55:17.687642 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2479 |
vulnerable | 2026-06-08 04:55:08.032934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1670 |
vulnerable | 2026-06-08 04:54:09.822360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1668 |
vulnerable | 2026-06-08 04:54:09.819955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1667 |
vulnerable | 2026-06-08 04:54:09.793115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3299 |
vulnerable | 2026-06-08 04:51:33.263218 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3298 |
vulnerable | 2026-06-08 04:51:33.258607 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0487 |
vulnerable | 2026-06-08 04:51:09.679243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0381 |
vulnerable | 2026-06-08 04:50:10.867302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.