CVE-2013-4432: Medium severity Mahara Mahara vulnerability
Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary folders (1) by leveraging an active folder tab loaded before permissions were removed or (2) via the folder parameter to artefact/file/groupfiles.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4432?
CVE-2013-4432 has been classified with a medium severity level due to improper access restrictions in directory management.
How do I fix CVE-2013-4432?
To fix CVE-2013-4432, upgrade Mahara to version 1.5.13, 1.6.8, or 1.7.4 or later.
What types of systems are affected by CVE-2013-4432?
CVE-2013-4432 affects Mahara versions prior to 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4.
What can a remote authenticated user do with CVE-2013-4432?
A remote authenticated user can leverage this vulnerability to read arbitrary folders that they should not have access to.
Is it safe to use affected versions of Mahara after CVE-2013-4432?
Using affected versions of Mahara is not safe as it may allow unauthorized access to restricted folders.