critical9.8
CVE-2022-45134
Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import.
Impact
Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import. A particularly structured XML file could cause code execution when being processed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | from 21.10.0 before 21.10.6 from 22.04.0 before 22.04.4 from 22.10.0 before 22.10.1 |