CVE-2017-1000149

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-1000149
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000149.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000149
Published
2017-11-03T18:29:00Z
Modified
2024-09-03T01:34:34.883559Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Mahara 1.10 before 1.10.9 and 15.04 before 15.04.6 and 15.10 before 15.10.2 are vulnerable to XSS due to window.opener (target="_blank" and window.open())

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2b3d01169863a8774b563ed70d7319aaee206c11
Last affected
2c77126e11080109b24fb7068b57f236ee9d3a2d
Last affected
2f5c68b907e43feb45f419665d221d78510d6cce
Last affected
3760b1e6ddd9626dfd792fef67a9ea3f67154940
Last affected
39ac3f76ea3981e204aca4f25a6d60bd988094f0
Last affected
3b3d3e3cd03d1663da0b0e3826fcdff13f488886
Last affected
44ebd0f0993352955f7971920fa8ca231e6a8bb9
Last affected
48a238a2f76a7ea322580fe93b7c026becd9acce
Last affected
51aa89acd91866bf1440acf3a8eb0b68774a1e14
Last affected
53ee40015a2363a6c5c3d3cccc3fb35e27a7abb0
Last affected
55009338a5519252d73a68d417d3b587b9184ff1
Last affected
576c0a5f0935930215fe139d13091330e5dfa100
Last affected
71a160b12bcde1bd3569377c8e010436228aaf5f
Last affected
9b217d5c0da7118a8c9d668794a3869d85276534
Last affected
9b6fcb9cbb746436cbd673d91386a390bfe59075
Last affected
aae381beee8b8894aca6510ba1505142d407ec0b
Last affected
b5fe2b35e1a12171feeb6a9d15e9308ea5787fe1
Last affected
b6692ccbd0e71253b07a1653639a3161cf44e3d1
Last affected
c055d23e1454d15bd96d8589da8687aa444e1bfb
Last affected
d527a5edeb6087fd94956e1e3e18bcf4a432540d
Last affected
dbbc422a0d44c1e7d5183879df1391b2f73423f7
Last affected
f670d266749f243f82da7e707cad564a79a3dfe4

Affected versions

1.*

1.0.0ALPHA1_RELEASE
1.0.0ALPHA2_RELEASE
1.0.0BETA1_RELEASE
1.0.0BETA2_RELEASE
1.1.0ALPHA1_RELEASE
1.1.0ALPHA2_RELEASE
1.1.0ALPHA3_RELEASE
1.1.0BETA1_RELEASE
1.1.0BETA2_RELEASE
1.1.0BETA3_RELEASE
1.1.0BETA4_RELEASE
1.10.0_RELEASE
1.10.1_RELEASE
1.10.2_RELEASE
1.10.3_RELEASE
1.10.4_RELEASE
1.10.5_RELEASE
1.10.6_RELEASE
1.10.7_RELEASE
1.10RC1_RELEASE
1.2.0ALPHA1_RELEASE
1.2.0ALPHA2_RELEASE
1.2.0ALPHA3_RELEASE
1.2.0BETA1_RELEASE
1.2.0BETA2_RELEASE
1.2.0BETA3_RELEASE
1.2.0BETA4_RELEASE
1.2.0RC1_RELEASE
1.3.0BETA1_RELEASE
1.3.0BETA2_RELEASE
1.3.0BETA3_RELEASE
1.3.0BETA4_RELEASE
1.4.0ALPHA1_RELEASE
1.7RC1_RELEASE
1.8RC1_RELEASE
1.8RC2_RELEASE

15.*

15.04RC1_RELEASE
15.04RC2_RELEASE
15.10.0_RELEASE
15.10.1_RELEASE
15.10RC1_RELEASE
15.10RC2_RELEASE