CVE-2020-9386

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch…

published March 9, 2020

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01001 · 62.5th percentile
Published
2020-03-09T14:14Z
EPSS history
Timeline
  • 09 MAR 14:14Z
    In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch…
    cvelistv5