Mahara vulnerabilities

Products

• Mahara 108

Newest

• mahara Mahara before 24.04.9 exposes database connection information if the database becomes unreachable... CVE-2025-29992 7.5 HighAugust 26, 2025
• mahara An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of... CVE-2024-47853 8.8 HighAugust 26, 2025
• mahara An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL... CVE-2024-47192 5.3 MediumAugust 26, 2025
• mahara In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML... CVE-2024-45753 6.1 MediumAugust 26, 2025
• mahara Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to... CVE-2024-39335 9.1 CriticalAugust 26, 2025
• mahara Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with... CVE-2024-35203 6.1 MediumAugust 26, 2025
• mahara An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About,... CVE-2024-39923 6.1 MediumAugust 25, 2025
• mahara Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental... CVE-2023-47799 7.5 HighAugust 25, 2025
• mahara Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user... CVE-2022-45134 9.8 CriticalAugust 22, 2025
• mahara Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font... CVE-2022-45133 6.5 MediumAugust 22, 2025
• mahara Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0... CVE-2022-44544 9.8 CriticalNovember 6, 2022
• mahara In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22... CVE-2022-42707 7.5 HighNovember 6, 2022
• mahara In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be... CVE-2022-33913 7.5 HighJune 20, 2022
• mahara In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is... CVE-2022-29585 7.5 HighApril 28, 2022
• mahara Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular... CVE-2022-29584 5.4 MediumApril 28, 2022
• mahara Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery ... CVE-2022-28892 8.8 HighApril 28, 2022
• mahara In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have... CVE-2022-24111 5.3 MediumFebruary 10, 2022
• mahara In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of... CVE-2022-24694 4.3 MediumFebruary 9, 2022
• mahara In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web... CVE-2021-40849 9.8 CriticalNovember 3, 2021
• mahara In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain... CVE-2021-40848 7.8 HighNovember 3, 2021
• mahara In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the... CVE-2021-43264 3.3 LowNovember 2, 2021
• mahara In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS... CVE-2021-43265 5.4 MediumNovember 2, 2021
• mahara In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export... CVE-2021-43266 7.3 HighNovember 2, 2021
• mahara Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to... CVE-2021-29349 Public exploit 6.5 MediumMarch 31, 2021
• mahara In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places... CVE-2020-15907 6.1 MediumAugust 7, 2020
• mahara In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the... CVE-2020-9387 4.3 MediumApril 30, 2020
• mahara In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata... CVE-2020-9386 4.3 MediumMarch 9, 2020
• mahara In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal... CVE-2020-9282 6.5 MediumMarch 9, 2020
• mahara Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers... CVE-2013-1426 6.1 MediumNovember 7, 2019
• mahara An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18... CVE-2019-9708 4.9 MediumMay 7, 2019
• mahara An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18... CVE-2019-9709 5.4 MediumMay 7, 2019
• mahara Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as... CVE-2018-11196 7.5 HighJune 1, 2018
• mahara Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to... CVE-2018-11195 6.8 MediumJune 1, 2018
• mahara Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to... CVE-2018-11565 5.3 MediumMay 30, 2018
• mahara Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to... CVE-2018-6182 6.1 MediumApril 9, 2018
• mahara Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to... CVE-2017-17455 5.9 MediumFebruary 20, 2018
• mahara Mahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site... CVE-2017-17454 5.4 MediumFebruary 20, 2018
• mahara An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could... CVE-2017-1000141 6.5 MediumJanuary 30, 2018
• mahara mobile Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in... CVE-2017-1000171 9.8 CriticalNovember 3, 2017
• mahara Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before... CVE-2017-1000157 4.4 MediumNovember 3, 2017
• mahara Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a... CVE-2017-1000156 6.5 MediumNovember 3, 2017
• mahara Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to... CVE-2017-1000155 4.3 MediumNovember 3, 2017
• mahara Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to... CVE-2017-1000154 9.8 CriticalNovember 3, 2017
• mahara Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to... CVE-2017-1000153 9.8 CriticalNovember 3, 2017
• mahara Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user... CVE-2017-1000152 9.8 CriticalNovember 3, 2017
• mahara Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to... CVE-2017-1000151 7.5 HighNovember 3, 2017
• mahara Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from... CVE-2017-1000150 8.8 HighNovember 3, 2017
• mahara Mahara 1.10 before 1.10.9 and 15.04 before 15.04.6 and 15.10 before 15.10.2 are vulnerable to XSS... CVE-2017-1000149 5.4 MediumNovember 3, 2017
• mahara Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to... CVE-2017-1000148 8.8 HighNovember 3, 2017
• mahara Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform... CVE-2017-1000147 6.8 MediumNovember 3, 2017
• Show olderLoading…