CVE-2020-15907 - In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing JavaScript

Back Back to CVE browser

MEDIUM

In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing JavaScript

Published Aug 7, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.70%

Description

In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing JavaScript.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://bugs.launchpad.net/mahara/+bug/1888163
x_refsource_MISCPatchThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7879
Advisory
https://mahara.org/interaction/forum/topic.php?id=8668
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://bugs.launchpad.net/mahara/+bug/1888163		x_refsource_MISCPatchThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7879		Advisory
https://mahara.org/interaction/forum/topic.php?id=8668		x_refsource_MISCVendor Advisory