CVE-2022-29585

In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used

published April 28, 2022

CVSS
—
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used. They are all shown from page 2 of the group results list (rather than only being shown for the institution that the viewer is a member of).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01040 · 63.8th percentile
Published
2022-04-28T15:29Z
EPSS history
Timeline
  • 28 APR 15:29Z
    In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used
    cvelistv5