CVE-2017-1000142: Medium severity mahara vulnerability
Published Nov 3, 2017
·Updated
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation.
Affected Software
21 affected components
Mahara Mahara=1.8-rc1
Mahara Mahara=1.8-rc2
Mahara Mahara=1.8.0
Mahara Mahara=1.8.1
Mahara Mahara=1.8.2
Mahara Mahara=1.8.3
Mahara Mahara=1.8.4
Mahara Mahara=1.8.5
Mahara Mahara=1.8.6
Mahara Mahara=1.9-rc1
Mahara Mahara=1.9.0
Mahara Mahara=1.9.1
Mahara Mahara=1.9.2
Mahara Mahara=1.9.3
Mahara Mahara=1.9.4
Mahara Mahara=1.10-rc1
Mahara Mahara=1.10.0
Mahara Mahara=1.10.1
Mahara Mahara=1.10.2
Mahara Mahara=15.04-rc1
Mahara Mahara=15.04-rc2
Remediation
Patch Available
Event History
Nov 3, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is CVE-2017-1000142?
CVE-2017-1000142 is a vulnerability in Mahara versions 1.8 through 1.10 and 15.04 that allows users to delete their submitted page through URL manipulation.
2
How severe is CVE-2017-1000142?
CVE-2017-1000142 has a severity rating of 6.5 (medium).
3
How can I fix CVE-2017-1000142?
To fix CVE-2017-1000142, you should upgrade Mahara to version 1.8.7, 1.9.5, 1.10.3, or 15.04.0.
4
Where can I find more information about CVE-2017-1000142?
You can find more information about CVE-2017-1000142 at the following link: https://bugs.launchpad.net/mahara/+bug/1425306