CVE-2017-1000139

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-1000139
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000139.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000139
Published
2017-11-03T18:29:00Z
Modified
2024-09-03T01:10:30.884022Z
Severity
  • 8.0 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
01d7c8e0fa6ad9d06fd8de8f25dbc8e299373216
Last affected
048e62ab06cc56febc61ca78655bc6ff156b84cd
Last affected
1960a70b7b0c42a600d7e0cb3b1812ce4a2cc83b
Last affected
1bf2cd2c62d191573aa118f9b5e382badd9d7f7f
Last affected
2f5c68b907e43feb45f419665d221d78510d6cce
Last affected
39ac3f76ea3981e204aca4f25a6d60bd988094f0
Last affected
48a238a2f76a7ea322580fe93b7c026becd9acce
Last affected
51aa89acd91866bf1440acf3a8eb0b68774a1e14
Last affected
5565883f64ce37a7e1313b91c2862e8b837101c4
Last affected
604f1385745ab72561e0bbe6a638155c7ea349bf
Last affected
6b198414484a5cde0b84af1d4d581184faa81e53
Last affected
776a4bab9a37273823ef081fab1357d7c0cf91e8
Last affected
91a483f6f5f2b9fb09bc33c4c98cea66581587cc
Last affected
ad61ae402fb169cc8081b98e5a2e6822d362b22e
Last affected
b0e585768829456eb7174936b533ccfcc024264c
Last affected
c055d23e1454d15bd96d8589da8687aa444e1bfb
Last affected
c97ba68462a8fad83036d1b896a1e412729604ee
Last affected
ccbf63bbaf768784757dd8b7a6e3841eb55ad9cd
Last affected
d10d29804684eb34f5ba659030f537559013f554
Last affected
d48a2752a7bd79468915295e40530feef75ceeda
Last affected
f670d266749f243f82da7e707cad564a79a3dfe4

Affected versions

1.*

1.0.0ALPHA1_RELEASE
1.0.0ALPHA2_RELEASE
1.0.0BETA1_RELEASE
1.0.0BETA2_RELEASE
1.1.0ALPHA1_RELEASE
1.1.0ALPHA2_RELEASE
1.1.0ALPHA3_RELEASE
1.1.0BETA1_RELEASE
1.1.0BETA2_RELEASE
1.1.0BETA3_RELEASE
1.1.0BETA4_RELEASE
1.10RC1_RELEASE
1.2.0ALPHA1_RELEASE
1.2.0ALPHA2_RELEASE
1.2.0ALPHA3_RELEASE
1.2.0BETA1_RELEASE
1.2.0BETA2_RELEASE
1.2.0BETA3_RELEASE
1.2.0BETA4_RELEASE
1.2.0RC1_RELEASE
1.3.0BETA1_RELEASE
1.3.0BETA2_RELEASE
1.3.0BETA3_RELEASE
1.3.0BETA4_RELEASE
1.4.0ALPHA1_RELEASE
1.7RC1_RELEASE
1.8.1_RELEASE
1.8.2_RELEASE
1.8.3_RELEASE
1.8.4_RELEASE
1.8.5_RELEASE
1.8RC1_RELEASE
1.8RC2_RELEASE
1.9.0_RELEASE
1.9.1_RELEASE
1.9RC1_RELEASE

15.*

15.04RC1_RELEASE
15.04RC2_RELEASE