Unrated
In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios...
CVE-2022-24111
First seen on SecPulse
Original description The description as published by the source.
In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.
References
- advisory github.com
- advisory nvd.nist.gov
- web bugs.launchpad.net
- web mahara.org