CVE-2017-9551: XSS
Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable to a user submitting potential dangerous payload, e.g. XSS code, to be saved as their name in the usrregistration table. The values are then emailed to the the user and administrator and if accepted become part of the new user's account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9551?
CVE-2017-9551 is classified as a high severity vulnerability due to its potential for XSS exploitation.
How do I fix CVE-2017-9551?
To fix CVE-2017-9551, upgrade Mahara to version 15.04.14, 16.04.8, 16.10.5, or 17.04.3 or later.
Which versions of Mahara are affected by CVE-2017-9551?
Versions 15.04 before 15.04.14, 16.04 before 16.04.8, 16.10 before 16.10.5, and 17.04 before 17.04.3 are affected by CVE-2017-9551.
What type of attack is CVE-2017-9551 associated with?
CVE-2017-9551 is associated with a cross-site scripting (XSS) attack due to user input vulnerability.
Is user data at risk with CVE-2017-9551?
Yes, user data is at risk with CVE-2017-9551 as malicious payloads can be saved and emailed to users.