NetSight
medium4.3

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the f…

Impact

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents are affected.)

Affected products

VendorProductAffected versions
MaharaMahara
from 20.10.0 before 20.10.4
from 21.04.0 before 21.04.3
Version 21.10.0

Weakness classification

References