CVE-2017-1000145

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-1000145
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000145.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000145
Published
2017-11-03T18:29:00Z
Modified
2024-09-03T01:34:22.198057Z
Severity
  • 4.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected versions

1.*

1.0.0ALPHA1_RELEASE
1.0.0ALPHA2_RELEASE
1.0.0BETA1_RELEASE
1.0.0BETA2_RELEASE
1.1.0ALPHA1_RELEASE
1.1.0ALPHA2_RELEASE
1.1.0ALPHA3_RELEASE
1.1.0BETA1_RELEASE
1.1.0BETA2_RELEASE
1.1.0BETA3_RELEASE
1.1.0BETA4_RELEASE
1.10RC1_RELEASE
1.2.0ALPHA1_RELEASE
1.2.0ALPHA2_RELEASE
1.2.0ALPHA3_RELEASE
1.2.0BETA1_RELEASE
1.2.0BETA2_RELEASE
1.2.0BETA3_RELEASE
1.2.0BETA4_RELEASE
1.2.0RC1_RELEASE
1.3.0BETA1_RELEASE
1.3.0BETA2_RELEASE
1.3.0BETA3_RELEASE
1.3.0BETA4_RELEASE
1.4.0ALPHA1_RELEASE
1.7RC1_RELEASE
1.8RC1_RELEASE
1.8RC2_RELEASE
1.9.0_RELEASE
1.9.1_RELEASE
1.9RC1_RELEASE

15.*

15.04RC1_RELEASE
15.04RC2_RELEASE