CVE-2013-4431: Medium severity Mahara Mahara vulnerability
Published May 19, 2014
·Updated
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request.
Affected Software
24 affected components
Mahara Mahara<=1.5.11
Mahara Mahara=1.5-rc1
Mahara Mahara=1.5-rc2
Mahara Mahara=1.5.0
Mahara Mahara=1.5.1
Mahara Mahara=1.5.2
Mahara Mahara=1.5.3
Mahara Mahara=1.5.4
Mahara Mahara=1.5.6
Mahara Mahara=1.5.7
Mahara Mahara=1.5.8
Mahara Mahara=1.5.9
Mahara Mahara=1.5.10
Mahara Mahara=1.7.-rc1
Mahara Mahara=1.7.0
Mahara Mahara=1.7.1
Mahara Mahara=1.7.2
Mahara Mahara=1.6.0
Mahara Mahara=1.6.1
Mahara Mahara=1.6.2
Mahara Mahara=1.6.3
Mahara Mahara=1.6.4
Mahara Mahara=1.6.5
Mahara Mahara=1.6.6
Event History
May 19, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4431?
CVE-2013-4431 has a medium severity rating, indicating a potential impact on system integrity.
2
How do I fix CVE-2013-4431?
To fix CVE-2013-4431, upgrade Mahara to version 1.5.12, 1.6.7, or 1.7.3 or later.
3
Who is affected by CVE-2013-4431?
CVE-2013-4431 affects users of Mahara versions prior to 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3.
4
What types of access does CVE-2013-4431 compromise?
CVE-2013-4431 allows remote authenticated users to modify arbitrary blocks by manipulating the block ID.
5
When was CVE-2013-4431 disclosed?
CVE-2013-4431 was disclosed on October 8, 2013.