medium6.8
CVE-2012-2246
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection v…
Impact
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | Versions 1.4, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2012/dsa-2591
- https://bugs.launchpad.net/mahara/+bug/1057240
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79273
- https://mahara.org/interaction/forum/topic.php?id=4939
- http://www.debian.org/security/2012/dsa-2591
- https://bugs.launchpad.net/mahara/+bug/1057240
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79273
- https://mahara.org/interaction/forum/topic.php?id=4939