CVE-2022-28892
28.04.2022, 16:15
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.
| Vendor | Product | Version |
|---|---|---|
| mahara | mahara | 𝑥 < 20.10.5 |
| mahara | mahara | 21.04.0 ≤ 𝑥 < 21.04.4 |
| mahara | mahara | 21.10.0 ≤ 𝑥 < 21.10.2 |
| mahara | mahara | 22.04.0:rc1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration