CVE-2020-15907: XSS
First published: Fri Aug 07 2020(Updated: )
In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing JavaScript.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mahara Mahara | >=19.04<19.04.6 | |
| Mahara Mahara | >=19.10<19.10.4 | |
| Mahara Mahara | >=20.04<20.04.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-15907?
CVE-2020-15907 is a vulnerability in Mahara CMS versions 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1 that allows execution of code contained in file or folder names.
How does CVE-2020-15907 affect Mahara?
CVE-2020-15907 affects Mahara CMS versions 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1 by allowing the execution of code contained in certain file or folder names that may contain JavaScript.
What is the severity of CVE-2020-15907?
CVE-2020-15907 has a severity value of 6.1, which is considered medium.
How can I fix CVE-2020-15907?
To fix CVE-2020-15907, it is recommended to upgrade to Mahara CMS versions 19.04.6, 19.10.4, or 20.04.1.
Where can I find more information about CVE-2020-15907?
More information about CVE-2020-15907 can be found at the following references: [1], [2].
- collector/nvd-index
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mahara
- canonical/mahara mahara
- version/mahara mahara/19.04
- version/mahara mahara/19.10
- version/mahara mahara/20.04