NetSight
critical9.1

CVE-2024-39335

Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under …

Impact

Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions.

Affected products

VendorProductAffected versions
MaharaMahara
from 23.04.0 before 23.04.6
from 24.04.0 before 24.04.1

Weakness classification

References