CVEvulnerability

CVE-2026-42163

9.8 CRITICAL Published 2026-08-17 Modified 2026-08-31 Official page ↗
Status
Deferred
Published
2026-08-17
Last modified
2026-08-31
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284

Description

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage.

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References