CVE-2017-1000137

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000137
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000137.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000137
Published
2017-11-03T18:29:00.417Z
Modified
2026-07-08T12:05:13.070419Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via the keyboard (rather than drag and drop).

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
2f5c68b907e43feb45f419665d221d78510d6cce
Last affected
39ac3f76ea3981e204aca4f25a6d60bd988094f0
Database specific 
{
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.10-rc1"
        },
        {
            "last_affected": "1.10-rc1"
        },
        {
            "introduced": "15.04-rc1"
        },
        {
            "last_affected": "15.04-rc1"
        },
        {
            "introduced": "15.04-rc2"
        },
        {
            "last_affected": "15.04-rc2"
        }
    ]
}

Affected versions

1.*
1.10-rc1
15.*
15.04-rc1
15.04-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000137.json"