CVE-2021-40849
03.11.2021, 11:15
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web services token is vulnerable to being exploited and logged into, resulting in information disclosure (at a minimum) and often escalation of privileges.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mahara | mahara | 𝑥 < 20.04.5 |
| mahara | mahara | 20.10.0 ≤ 𝑥 < 20.10.3 |
| mahara | mahara | 21.04.0 ≤ 𝑥 < 21.04.2 |
| mahara | mahara | 21.10.0:rc1 |
| mahara | mahara | 21.10.0:rc2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration