CVE-2017-14163

An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3

published October 31, 2017

CVSS
—
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00922 · 59.9th percentile
Published
2017-10-31T18:00Z
EPSS history
Timeline
  • 31 OCT 18:00Z
    An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3
    cvelistv5