CVE-2025-29992: Infoleak
Published Aug 26, 2025
·Updated
Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.
Affected Software
2 affected components
Mahara Mahara<24.04.9
Mahara Mahara<24.04.9
Event History
Aug 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-29992?
CVE-2025-29992 is considered a moderate severity vulnerability due to the potential exposure of sensitive database connection information.
2
How do I fix CVE-2025-29992?
To fix CVE-2025-29992, update Mahara to version 24.04.9 or later to ensure database connection information is not exposed.
3
What impact does CVE-2025-29992 have on my Mahara installation?
CVE-2025-29992 can lead to unauthorized access to sensitive information if the database server becomes unreachable.
4
Which versions of Mahara are affected by CVE-2025-29992?
CVE-2025-29992 affects all versions of Mahara prior to 24.04.9.
5
Is CVE-2025-29992 a remote or local vulnerability?
CVE-2025-29992 can be exploited remotely if an attacker can access the Mahara installation when the database is unavailable.