Unrated
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in...
CVE-2021-43266
First seen on SecPulse
Original description The description as published by the source.
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution
References
- advisory bugs.launchpad.net
- advisory mahara.org
- advisory mahara.org
- report bugs.launchpad.net