critical9.8
CVE-2017-1000154
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Mahara's built-in…
Impact
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Mahara's built-in login form, still allowing users to log in even if their institution was expired or suspended.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | Versions 15.04, 15.04.0, 15.04.1, 15.04.2, 15.04.3, 15.04.4 |