CVE-2022-33913

In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check

published June 20, 2022

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01072 · 64.6th percentile
Published
2022-06-20T15:26Z
EPSS history
Timeline
  • 20 JUN 15:26Z
    In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check
    cvelistv5