CVE-2017-14752: XSS
First published: Tue Oct 31 2017(Updated: )
Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mahara Mahara | =15.04-rc1 | |
| Mahara Mahara | =15.04-rc2 | |
| Mahara Mahara | =15.04.0 | |
| Mahara Mahara | =15.04.1 | |
| Mahara Mahara | =15.04.2 | |
| Mahara Mahara | =15.04.3 | |
| Mahara Mahara | =15.04.4 | |
| Mahara Mahara | =15.04.5 | |
| Mahara Mahara | =15.04.6 | |
| Mahara Mahara | =15.04.7 | |
| Mahara Mahara | =15.04.8 | |
| Mahara Mahara | =15.04.9 | |
| Mahara Mahara | =15.04.10 | |
| Mahara Mahara | =15.04.11 | |
| Mahara Mahara | =15.04.12 | |
| Mahara Mahara | =15.04.13 | |
| Mahara Mahara | =15.04.14 | |
| Mahara Mahara | =16.04-rc1 | |
| Mahara Mahara | =16.04-rc2 | |
| Mahara Mahara | =16.04.0 | |
| Mahara Mahara | =16.04.1 | |
| Mahara Mahara | =16.04.2 | |
| Mahara Mahara | =16.04.3 | |
| Mahara Mahara | =16.04.4 | |
| Mahara Mahara | =16.04.5 | |
| Mahara Mahara | =16.04.6 | |
| Mahara Mahara | =16.04.7 | |
| Mahara Mahara | =16.04.8 | |
| Mahara Mahara | =16.10-rc1 | |
| Mahara Mahara | =16.10-rc2 | |
| Mahara Mahara | =16.10.0 | |
| Mahara Mahara | =16.10.1 | |
| Mahara Mahara | =16.10.2 | |
| Mahara Mahara | =16.10.3 | |
| Mahara Mahara | =16.10.4 | |
| Mahara Mahara | =16.10.5 | |
| Mahara Mahara | =17.04-rc1 | |
| Mahara Mahara | =17.04-rc2 | |
| Mahara Mahara | =17.04.0 | |
| Mahara Mahara | =17.04.1 | |
| Mahara Mahara | =17.04.2 | |
| Mahara Mahara | =17.04.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/mahara
- canonical/mahara mahara
- version/mahara mahara/15.04-rc1
- version/mahara mahara/15.04-rc2
- version/mahara mahara/15.04.0
- version/mahara mahara/15.04.1
- version/mahara mahara/15.04.2
- version/mahara mahara/15.04.3
- version/mahara mahara/15.04.4
- version/mahara mahara/15.04.5
- version/mahara mahara/15.04.6
- version/mahara mahara/15.04.7
- version/mahara mahara/15.04.8
- version/mahara mahara/15.04.9
- version/mahara mahara/15.04.10
- version/mahara mahara/15.04.11
- version/mahara mahara/15.04.12
- version/mahara mahara/15.04.13
- version/mahara mahara/15.04.14
- version/mahara mahara/16.04-rc1
- version/mahara mahara/16.04-rc2
- version/mahara mahara/16.04.0
- version/mahara mahara/16.04.1
- version/mahara mahara/16.04.2
- version/mahara mahara/16.04.3
- version/mahara mahara/16.04.4
- version/mahara mahara/16.04.5
- version/mahara mahara/16.04.6
- version/mahara mahara/16.04.7
- version/mahara mahara/16.04.8
- version/mahara mahara/16.10-rc1
- version/mahara mahara/16.10-rc2
- version/mahara mahara/16.10.0
- version/mahara mahara/16.10.1
- version/mahara mahara/16.10.2
- version/mahara mahara/16.10.3
- version/mahara mahara/16.10.4
- version/mahara mahara/16.10.5
- version/mahara mahara/17.04-rc1
- version/mahara mahara/17.04-rc2
- version/mahara mahara/17.04.0
- version/mahara mahara/17.04.1
- version/mahara mahara/17.04.2
- version/mahara mahara/17.04.3