NetSight
IP …
high7.3

CVE-2021-43266

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collec…

Impact

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution

Affected products

VendorProductAffected versions
MaharaMahara
from 20.04.0 before 20.04.5
from 20.10.0 before 20.10.3
from 21.04.0 before 21.04.2
from 20.10.0 before 20.10.4
from 21.04.0 before 21.04.3
from 21.10.0 before 21.10.1

Weakness classification

CWE-78

References