high7.5
CVE-2022-33913
In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check.
Impact
In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | from 21.04.0 before 21.04.6 from 21.10.0 before 21.10.4 Version 22.04.2 |