CVE-2020-9387

In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the…

published April 30, 2020

CVSS
—
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.5th percentile
Published
2020-04-30T12:46Z
EPSS history
Timeline
  • 30 APR 12:46Z
    In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the…
    cvelistv5