CVE-2017-14752: XSS
Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14752?
CVE-2017-14752 has a high severity due to the potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2017-14752?
To fix CVE-2017-14752, upgrade Mahara to version 15.04.15, 16.04.9, 16.10.6, or 17.04.4 or later.
Which versions of Mahara are affected by CVE-2017-14752?
CVE-2017-14752 affects Mahara versions 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4.
What types of payloads can exploit CVE-2017-14752?
CVE-2017-14752 can be exploited by submitting potentially dangerous payloads such as XSS code in profile fields.
What are the consequences of CVE-2017-14752?
The consequences of CVE-2017-14752 include potential user profile manipulation and increased risks of XSS attacks.