CVE-2017-1000137: XSS

Published Nov 3, 2017

Updated

Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via the keyboard (rather than drag and drop).

Affected Software

3 affected components

Mahara Mahara=1.10-rc1

Mahara Mahara=15.04-rc1

Mahara Mahara=15.04-rc2

Remediation

Patch Available

https://bugs.launchpad.net/mahara/+bug/1375092

Event History

Nov 3, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is CVE-2017-1000137?

CVE-2017-1000137 is a vulnerability found in Mahara versions 1.10 before 1.10.0 and 15.04 before 15.04.0 that allows for possible cross-site scripting when adding a text block to a page via the keyboard instead of drag and drop.

How severe is CVE-2017-1000137?

CVE-2017-1000137 has a severity rating of medium with a CVSS score of 5.4.

How can I fix CVE-2017-1000137?

To fix CVE-2017-1000137, it is recommended to upgrade to Mahara version 1.10.0 or 15.04.0.

Where can I find more information about CVE-2017-1000137?

More information about CVE-2017-1000137 can be found at the following link: [https://bugs.launchpad.net/mahara/+bug/1375092](https://bugs.launchpad.net/mahara/+bug/1375092).

What is the Common Weakness Enumeration (CWE) ID for CVE-2017-1000137?

The Common Weakness Enumeration (CWE) ID for CVE-2017-1000137 is 79.