CVE-2010-3871: XSS
Published Nov 9, 2010
·Updated
Cross-site scripting (XSS) vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.
Affected Software
62 affected components
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.1.6
Mahara Mahara=1.2.0
Mahara Mahara=0.9.1
Mahara Mahara=1.1.2
Mahara Mahara=1.2.3
Mahara Mahara=1.0.4
Mahara Mahara=1.1.7
Mahara Mahara=1.2.1
Mahara Mahara=0.9.2
Mahara Mahara=1.0.1
Mahara Mahara=1.0.8
Mahara Mahara=1.2.0-rc1
Mahara Mahara=1.2.0-alpha1
Mahara Mahara=1.0.12
Mahara Mahara=1.0.15
Mahara Mahara=1.0.6
Mahara Mahara=1.3.0-beta1
Mahara Mahara=1.0.9
Mahara Mahara=1.2.0-alpha2
Mahara Mahara=1.3.0-rc1
Mahara Mahara=1.1.9
Mahara Mahara=1.0.5
Mahara Mahara=1.1
Mahara Mahara=1.2.0-beta4
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.1.4
Mahara Mahara=1.2.0-alpha3
Mahara Mahara=1.2.0-beta2
Mahara Mahara=1.2.6
Mahara Mahara=1.3.0
Mahara Mahara=1.0.2
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.0.3
Mahara Mahara=1.0.13
Mahara Mahara=1.3.1
Mahara Mahara=1.0.10
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.3.0-beta2
Mahara Mahara=1.1.8
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.2.4
Mahara Mahara=1.1.0-alpha1
Mahara Mahara=1.3.0-beta3
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.2.2
Mahara Mahara=1.2.5
Mahara Mahara=1.1.3
Mahara Mahara=1.0.7
Mahara Mahara=1.0.0
Mahara Mahara=1.1.0
Mahara Mahara=1.1.5
Mahara Mahara<=1.3.2
Mahara Mahara=1.2.0-beta1
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-rc1
Mahara Mahara=1.2.0-beta3
Mahara Mahara=1.0.14
Mahara Mahara=1.3.0-beta4
Mahara Mahara=1.0.11
Mahara Mahara=0.9.0
Event History
Nov 9, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3871?
CVE-2010-3871 has a medium severity due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2010-3871?
To fix CVE-2010-3871, upgrade Mahara to version 1.3.3 or later.
3
What types of attacks are possible with CVE-2010-3871?
CVE-2010-3871 allows remote attackers to execute arbitrary web scripts or HTML through XSS.
4
Which versions of Mahara are affected by CVE-2010-3871?
CVE-2010-3871 affects Mahara versions prior to 1.3.3 including 0.9.0 to 1.2.6.
5
What should I do if I can't upgrade my Mahara installation to fix CVE-2010-3871?
If upgrading is not feasible, implement input validation and sanitization measures to mitigate the risk of XSS.