CVE-2017-1000132: XSS
Published Nov 3, 2017
·Updated
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file.
Affected Software
21 affected components
Mahara Mahara=1.8-rc1
Mahara Mahara=1.8-rc2
Mahara Mahara=1.8.0
Mahara Mahara=1.8.1
Mahara Mahara=1.8.2
Mahara Mahara=1.8.3
Mahara Mahara=1.8.4
Mahara Mahara=1.8.5
Mahara Mahara=1.8.6
Mahara Mahara=1.9-rc1
Mahara Mahara=1.9.0
Mahara Mahara=1.9.1
Mahara Mahara=1.9.2
Mahara Mahara=1.9.3
Mahara Mahara=1.9.4
Mahara Mahara=1.10-rc1
Mahara Mahara=1.10.0
Mahara Mahara=1.10.1
Mahara Mahara=1.10.2
Mahara Mahara=15.04-rc1
Mahara Mahara=15.04-rc2
Remediation
Patch Available
Event History
Nov 3, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1000132?
The severity of CVE-2017-1000132 is medium with a CVSS score of 4.8.
2
How can a user be affected by CVE-2017-1000132?
A user can be affected by CVE-2017-1000132 when they try to download a maliciously created .swf file.
3
Which versions of Mahara are vulnerable to CVE-2017-1000132?
Mahara versions 1.8 before 1.8.7, 1.9 before 1.9.5, 1.10 before 1.10.3, and 15.04 before 15.04.0 are vulnerable to CVE-2017-1000132.
4
How can I fix CVE-2017-1000132?
To fix CVE-2017-1000132, users should upgrade to Mahara versions 1.8.7, 1.9.5, 1.10.3, or 15.04.0.
5
Is there any additional information about CVE-2017-1000132?
Yes, you can find more information about CVE-2017-1000132 at the following reference: https://bugs.launchpad.net/mahara/+bug/1190788