CVE-2011-2773: CSRF
Published Nov 15, 2011
·Updated
Cross-site request forgery (CSRF) vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentication of administrators for requests that add a user to an institution.
Affected Software
72 affected components
Mahara Mahara<=1.4.0
Mahara Mahara=0.9.0
Mahara Mahara=0.9.1
Mahara Mahara=0.9.2
Mahara Mahara=1.0.0
Mahara Mahara=1.0.1
Mahara Mahara=1.0.2
Mahara Mahara=1.0.3
Mahara Mahara=1.0.4
Mahara Mahara=1.0.5
Mahara Mahara=1.0.6
Mahara Mahara=1.0.7
Mahara Mahara=1.0.8
Mahara Mahara=1.0.9
Mahara Mahara=1.0.10
Mahara Mahara=1.0.11
Mahara Mahara=1.0.12
Mahara Mahara=1.0.13
Mahara Mahara=1.0.14
Mahara Mahara=1.0.15
Mahara Mahara=1.1
Mahara Mahara=1.1.0
Mahara Mahara=1.1.0-alpha1
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.1.0-rc1
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.1.2
Mahara Mahara=1.1.3
Mahara Mahara=1.1.4
Mahara Mahara=1.1.5
Mahara Mahara=1.1.6
Mahara Mahara=1.1.7
Mahara Mahara=1.1.8
Mahara Mahara=1.1.9
Mahara Mahara=1.2.0
Mahara Mahara=1.2.0-alpha1
Mahara Mahara=1.2.0-alpha2
Mahara Mahara=1.2.0-alpha3
Mahara Mahara=1.2.0-beta1
Mahara Mahara=1.2.0-beta2
Mahara Mahara=1.2.0-beta3
Mahara Mahara=1.2.0-beta4
Mahara Mahara=1.2.0-rc1
Mahara Mahara=1.2.1
Mahara Mahara=1.2.2
Mahara Mahara=1.2.3
Mahara Mahara=1.2.4
Mahara Mahara=1.2.5
Mahara Mahara=1.2.6
Mahara Mahara=1.3.0
Mahara Mahara=1.3.0-beta1
Mahara Mahara=1.3.0-beta2
Mahara Mahara=1.3.0-beta3
Mahara Mahara=1.3.0-beta4
Mahara Mahara=1.3.0-rc1
Mahara Mahara=1.3.1
Mahara Mahara=1.3.2
Mahara Mahara=1.3.3
Mahara Mahara=1.3.4
Mahara Mahara=1.3.5
Mahara Mahara=1.3.6
Mahara Mahara=1.3.7
Mahara Mahara=1.4-rc1
Mahara Mahara=1.4-rc2
Mahara Mahara=1.4-rc3
Mahara Mahara=1.4-rc4
Remediation
Patch Available
Event History
Nov 15, 2011
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2773?
CVE-2011-2773 is classified as a medium severity vulnerability due to its potential to hijack administrative sessions.
2
How do I fix CVE-2011-2773?
To fix CVE-2011-2773, upgrade Mahara to version 1.4.1 or later.
3
What types of attacks can exploit CVE-2011-2773?
CVE-2011-2773 can be exploited through cross-site request forgery (CSRF) attacks targeting administrators.
4
Which Mahara versions are affected by CVE-2011-2773?
CVE-2011-2773 affects Mahara versions prior to 1.4.1, including various 1.x and 0.9.x releases.
5
What is the impact of CVE-2011-2773?
The impact of CVE-2011-2773 includes unauthorized access to administrator functionality, potentially allowing attackers to add users to institutions.