CVE-2011-2774
15.11.2011, 03:57
The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mahara | mahara | 1.3.0 |
| mahara | mahara | 1.3.0:beta1 |
| mahara | mahara | 1.3.0:beta2 |
| mahara | mahara | 1.3.0:beta3 |
| mahara | mahara | 1.3.0:beta4 |
| mahara | mahara | 1.3.0:rc1 |
| mahara | mahara | 1.3.1 |
| mahara | mahara | 1.3.2 |
| mahara | mahara | 1.3.3 |
| mahara | mahara | 1.3.4 |
| mahara | mahara | 1.3.5 |
| mahara | mahara | 1.3.6 |
| mahara | mahara | 1.3.7 |
| mahara | mahara | 1.4:rc1 |
| mahara | mahara | 1.4:rc2 |
| mahara | mahara | 1.4:rc3 |
| mahara | mahara | 1.4:rc4 |
| mahara | mahara | 1.4.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration