CVE-2017-1000153

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000153
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000153.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000153
Published
2017-11-03T18:29:01.027Z
Modified
2026-04-10T03:56:01.808111Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email can be used to gain access to the user's account.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
48a238a2f76a7ea322580fe93b7c026becd9acce
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
39ac3f76ea3981e204aca4f25a6d60bd988094f0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9b217d5c0da7118a8c9d668794a3869d85276534
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71a160b12bcde1bd3569377c8e010436228aaf5f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b3d3e3cd03d1663da0b0e3826fcdff13f488886
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
44ebd0f0993352955f7971920fa8ca231e6a8bb9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d527a5edeb6087fd94956e1e3e18bcf4a432540d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
53ee40015a2363a6c5c3d3cccc3fb35e27a7abb0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eea43577f7952fcfef7cbaf61b87cce1bdcdb8dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8f8c729b91c4db1b11a43ed9248385702608e6db
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
734d408f59db38b464f616fbfb377fcddf522d4a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
80673cb4210bef8ec2592cd1bd6e59192373d66b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c4f30a389c34a2177a7f2aa60a69b2494c5f08fa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
131e345b6847f10cb4a59ca4c748224d8bbe3cab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6151bb5fea5811277d051a81865b946d76a92fba
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc9308e5d855dc04dc81990c2901b6e0b6e98102
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c3601dde87abf89382c8b3ac74d500b5e636560a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
850a663a5e911e819a8216a9405d84ea3cf3cdab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b5fe2b35e1a12171feeb6a9d15e9308ea5787fe1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2c77126e11080109b24fb7068b57f236ee9d3a2d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c718e63ed2b6d3d351d38d94c7008ee880ad655
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1c2f89f8ee9dd8dba44594e8d50a4d47380eec9e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
378d03e92c3cda58935d895ce7dd9a7d0f0a4a1b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7555fd2d8dc30bbf3c0ed6a95f4b9a045500c0dc
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.10.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.10.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.10.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.10.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.10.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.10.5"
        }
    ]
}

Affected versions

1.*
1.0.0ALPHA1_RELEASE
1.0.0ALPHA2_RELEASE
1.0.0BETA2_RELEASE
1.1.0ALPHA1_RELEASE
1.1.0ALPHA2_RELEASE
1.1.0ALPHA3_RELEASE
1.1.0BETA2_RELEASE
1.1.0BETA4_RELEASE
1.2.0ALPHA2_RELEASE
1.2.0ALPHA3_RELEASE
1.3.0BETA1_RELEASE
1.3.0BETA2_RELEASE
1.4.0ALPHA1_RELEASE
1.7RC1_RELEASE
1.8RC1_RELEASE
1.8RC2_RELEASE
15.*
15.04.0_RELEASE
15.04.1_RELEASE
15.04.2_RELEASE
15.04.3_RELEASE
15.04.4_RELEASE
15.04.5_RELEASE
15.04.6_RELEASE
15.04.7_RELEASE
15.04.8_RELEASE
15.04.9_RELEASE
15.04RC1_RELEASE
15.04RC2_RELEASE
15.10.0_RELEASE
15.10.1_RELEASE
15.10.2_RELEASE
15.10.3_RELEASE
15.10.4_RELEASE
15.10.5_RELEASE
15.10RC1_RELEASE
15.10RC2_RELEASE
16.*
16.04.0_RELEASE
16.04.1_RELEASE
16.04.2_RELEASE
16.04.3_RELEASE
16.04RC1_RELEASE
16.04RC2_RELEASE

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000153.json"