CVEvulnerability

CVE-2024-39335

9.1 CRITICAL Published 2025-08-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-08-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-200

Description

Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions.

Affected configurations

• mahara mahara (>= 23.04.0 < 23.04.6) • mahara mahara (>= 24.04.0 < 24.04.1)

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References