medium6.5
CVE-2017-1000156
Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any group member…
Impact
Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any group member even when they didn't have the admin role.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | Versions 15.04, 15.04.0, 15.04.1, 15.04.2, 15.04.3, 15.04.4 |