CVE-2017-1000134

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-1000134

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000134.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-1000134

Published

2017-11-03T18:29:00Z

Modified

2026-07-08T12:05:11Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose access to the group files they uploaded if another group member changes the access permissions on them.

References

https://bugs.launchpad.net/mahara/+bug/1267686

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type

GIT

Repo

https://github.com/maharaproject/mahara

Events

Introduced

c97ba68462a8fad83036d1b896a1e412729604ee

Last Affected

39ac3f76ea3981e204aca4f25a6d60bd988094f0

Database specific

Show details

{
    "cpe": [
        "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.8-rc1"
        },
        {
            "last_affected": "1.8-rc1"
        },
        {
            "introduced": "1.8-rc2"
        },
        {
            "last_affected": "1.8-rc2"
        },
        {
            "introduced": "1.8.0"
        },
        {
            "last_affected": "1.8.0"
        },
        {
            "introduced": "1.8.1"
        },
        {
            "last_affected": "1.8.1"
        },
        {
            "introduced": "1.8.2"
        },
        {
            "last_affected": "1.8.2"
        },
        {
            "introduced": "1.8.3"
        },
        {
            "last_affected": "1.8.3"
        },
        {
            "introduced": "1.8.4"
        },
        {
            "last_affected": "1.8.4"
        },
        {
            "introduced": "1.8.5"
        },
        {
            "last_affected": "1.8.5"
        },
        {
            "introduced": "1.9-rc1"
        },
        {
            "last_affected": "1.9-rc1"
        },
        {
            "introduced": "1.9.0"
        },
        {
            "last_affected": "1.9.0"
        },
        {
            "introduced": "1.9.1"
        },
        {
            "last_affected": "1.9.1"
        },
        {
            "introduced": "1.9.2"
        },
        {
            "last_affected": "1.9.2"
        },
        {
            "introduced": "1.9.3"
        },
        {
            "last_affected": "1.9.3"
        },
        {
            "introduced": "1.10-rc1"
        },
        {
            "last_affected": "1.10-rc1"
        },
        {
            "introduced": "1.10.0"
        },
        {
            "last_affected": "1.10.0"
        },
        {
            "introduced": "15.04-rc1"
        },
        {
            "last_affected": "15.04-rc1"
        },
        {
            "introduced": "15.04-rc2"
        },
        {
            "last_affected": "15.04-rc2"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*

1.10-rc1

1.10.0

1.8-rc1

1.8-rc2

1.8.0

1.8.1

1.8.2

1.8.3

1.8.4

1.8.5

1.8RC1_RELEASE

1.8RC2_RELEASE

1.9-rc1

1.9.0

1.9.1

1.9.2

1.9.3

15.*

15.04-rc1

15.04-rc2

15.04RC1_RELEASE

15.04RC2_RELEASE

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000134.json"