NetSight
high7.5

CVE-2022-42707

In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images are accessible without a sufficient permi…

Impact

In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images are accessible without a sufficient permission check under certain conditions.

Affected products

VendorProductAffected versions
MaharaMahara
from 21.04.0 before 21.04.7
from 21.10.0 before 21.10.5
from 22.04.0 before 22.04.3
Version 22.10.0

Weakness classification

References