CVE-2022-24111
First published: Thu Feb 10 2022(Updated: )
In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mahara Mahara | >=21.04.0<21.04.3 | |
| Mahara Mahara | =21.10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Mahara vulnerability?
The vulnerability ID for this Mahara vulnerability is CVE-2022-24111.
What is the severity of CVE-2022-24111?
The severity of CVE-2022-24111 is medium with a severity value of 5.3.
Which versions of Mahara are affected by CVE-2022-24111?
Mahara versions 21.04 before 21.04.3 and 21.10 before 21.10.1 are affected by CVE-2022-24111.
What is the impact of CVE-2022-24111?
CVE-2022-24111 allows portfolios created in certain groups or on the site and institution levels to be viewed without requiring a login if the URL is known.
Is there a fix available for CVE-2022-24111?
Yes, the fix for CVE-2022-24111 is to upgrade to Mahara version 21.04.3 or 21.10.1.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/mahara
- canonical/mahara mahara
- version/mahara mahara/21.04.0
- version/mahara mahara/21.10.0