未評価
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in...
CVE-2021-43266
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution
参照URL
- advisory bugs.launchpad.net
- advisory mahara.org
- advisory mahara.org
- report bugs.launchpad.net