CVE-2021-43266
02.11.2021, 22:15
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution
Vendor | Product | Version |
---|---|---|
mahara | mahara | 20.04.0 ≤ 𝑥 < 20.04.5 |
mahara | mahara | 20.10.0 ≤ 𝑥 < 20.10.3 |
mahara | mahara | 21.04.0 ≤ 𝑥 < 21.04.2 |
mahara | mahara | 20.10.0 ≤ 𝑥 < 20.10.4 |
mahara | mahara | 21.04.0 ≤ 𝑥 < 21.04.3 |
mahara | mahara | 21.10.0 ≤ 𝑥 < 21.10.1 |
𝑥
= Vulnerable software versions
References