CVE-2017-1000155

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-1000155
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000155.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000155
Published
2017-11-03T18:29:01Z
Modified
2024-09-03T01:34:46.396082Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being accessed without any access control checks consequently allowing any of a user's uploaded profile pictures to be viewable by anyone, whether or not they were currently selected as the "default" or used in any pages.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
131e345b6847f10cb4a59ca4c748224d8bbe3cab
Last affected
1c2f89f8ee9dd8dba44594e8d50a4d47380eec9e
Last affected
2c77126e11080109b24fb7068b57f236ee9d3a2d
Last affected
39ac3f76ea3981e204aca4f25a6d60bd988094f0
Last affected
3b3d3e3cd03d1663da0b0e3826fcdff13f488886
Last affected
3c718e63ed2b6d3d351d38d94c7008ee880ad655
Last affected
44ebd0f0993352955f7971920fa8ca231e6a8bb9
Last affected
48a238a2f76a7ea322580fe93b7c026becd9acce
Last affected
53ee40015a2363a6c5c3d3cccc3fb35e27a7abb0
Last affected
6151bb5fea5811277d051a81865b946d76a92fba
Last affected
71a160b12bcde1bd3569377c8e010436228aaf5f
Last affected
8f8c729b91c4db1b11a43ed9248385702608e6db
Last affected
9b217d5c0da7118a8c9d668794a3869d85276534
Last affected
b5fe2b35e1a12171feeb6a9d15e9308ea5787fe1
Last affected
bc9308e5d855dc04dc81990c2901b6e0b6e98102
Last affected
c4f30a389c34a2177a7f2aa60a69b2494c5f08fa
Last affected
d527a5edeb6087fd94956e1e3e18bcf4a432540d
Last affected
eea43577f7952fcfef7cbaf61b87cce1bdcdb8dd

Affected versions

1.*

1.0.0ALPHA1_RELEASE
1.0.0ALPHA2_RELEASE
1.0.0BETA1_RELEASE
1.0.0BETA2_RELEASE
1.1.0ALPHA1_RELEASE
1.1.0ALPHA2_RELEASE
1.1.0ALPHA3_RELEASE
1.1.0BETA1_RELEASE
1.1.0BETA2_RELEASE
1.1.0BETA3_RELEASE
1.1.0BETA4_RELEASE
1.2.0ALPHA1_RELEASE
1.2.0ALPHA2_RELEASE
1.2.0ALPHA3_RELEASE
1.2.0BETA1_RELEASE
1.2.0BETA2_RELEASE
1.2.0BETA3_RELEASE
1.2.0BETA4_RELEASE
1.2.0RC1_RELEASE
1.3.0BETA1_RELEASE
1.3.0BETA2_RELEASE
1.3.0BETA3_RELEASE
1.3.0BETA4_RELEASE
1.4.0ALPHA1_RELEASE
1.7RC1_RELEASE
1.8RC1_RELEASE
1.8RC2_RELEASE

15.*

15.04RC1_RELEASE
15.04RC2_RELEASE
15.10.0_RELEASE
15.10.1_RELEASE
15.10.2_RELEASE
15.10.3_RELEASE
15.10RC1_RELEASE
15.10RC2_RELEASE

16.*

16.04RC1_RELEASE
16.04RC2_RELEASE