GitHub Advisoryadvisory · Maven
GHSA-cx95-q6gx-w4qp SAK-50571 Sakai Kernel users created with type roleview can login as a normal user
HIGH
Official page ↗
- Aliases
- CVE-2024-47876
- Ecosystem
- Maven
- Packages
- org.sakaiproject.kernel:sakai-kernel-impl
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
- Weaknesses
- CWE-285
- Reviewed
- 2024-10-15
Affected packages
• Maven org.sakaiproject.kernel:sakai-kernel-impl: >= 23.0, < 23.3 → fixed in 23.3
Description
Impact
Illegal access can be granted to the system.
References
see https://sakaiproject.atlassian.net/browse/SAK-50571
Related
Alias · CVE (1)
- CVE-2024-47876 Sakai is a Collaboration and Learning Environment. vulnerability
Weakness · CWE (1)
- CWE-285 Improper Authorization weakness
References
- https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp web
- https://nvd.nist.gov/vuln/detail/CVE-2024-47876 advisory
- https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41 web
- https://central.sonatype.com/artifact/org.sakaiproject.kernel/sakai-kernel-impl web
- https://github.com/sakaiproject/sakai package
- https://sakaiproject.atlassian.net/browse/SAK-50571 web