CVE-2020-9282: Infoleak
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Mahara vulnerability?
The vulnerability ID for this Mahara vulnerability is CVE-2020-9282.
What is the severity level of CVE-2020-9282?
The severity level of CVE-2020-9282 is medium.
Which versions of Mahara are affected by CVE-2020-9282?
Mahara versions 18.10.0 to 18.10.5, 19.04.0 to 19.04.4, and 19.10.0 to 19.10.2 are affected by CVE-2020-9282.
What is the impact of CVE-2020-9282?
CVE-2020-9282 allows certain personal information to be discoverable by inspecting network responses on the 'Edit access' screen when sharing portfolios.
Are there any references for this vulnerability?
Yes, you can find references for CVE-2020-9282 at the following links: [https://bugs.launchpad.net/mahara/+bug/1863043](https://bugs.launchpad.net/mahara/+bug/1863043) and [https://mahara.org/interaction/forum/topic.php?id=8590](https://mahara.org/interaction/forum/topic.php?id=8590)