CVE-2017-1000142 - Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation

Back Back to CVE browser

MEDIUM

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation

Published Nov 3, 2017

6.5

MEDIUM

CVSS 3.0

EPSS 0.71%

Description

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://bugs.launchpad.net/mahara/+bug/1425306
x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1427
Advisory

Link	Providers	Tags
https://bugs.launchpad.net/mahara/+bug/1425306		x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1427		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 3, 2017

Updated Aug 5, 2024

Reserved Nov 2, 2017

Link CVE-2017-1000142

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-1000142

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 3, 2017

Updated Aug 5, 2024

Link EUVD-2017-1427

GitHub

No data