CVE-2017-14752

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-14752
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14752.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-14752
Published
2017-10-31T18:29:00.313Z
Modified
2026-04-10T03:58:42.406472Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
48a238a2f76a7ea322580fe93b7c026becd9acce
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
39ac3f76ea3981e204aca4f25a6d60bd988094f0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9b217d5c0da7118a8c9d668794a3869d85276534
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71a160b12bcde1bd3569377c8e010436228aaf5f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b3d3e3cd03d1663da0b0e3826fcdff13f488886
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
44ebd0f0993352955f7971920fa8ca231e6a8bb9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d527a5edeb6087fd94956e1e3e18bcf4a432540d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
53ee40015a2363a6c5c3d3cccc3fb35e27a7abb0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eea43577f7952fcfef7cbaf61b87cce1bdcdb8dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8f8c729b91c4db1b11a43ed9248385702608e6db
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
734d408f59db38b464f616fbfb377fcddf522d4a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
80673cb4210bef8ec2592cd1bd6e59192373d66b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
76a6b2398e4d49c94d14103208a4c406f1e1a1a0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7dddee6b891847be8d953de8ea98f9fd802042df
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0526e945057759b75205da13b71eac9703a8ab18
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8e6393cff844671df756f594f4857df454364a4b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
58fb4676e40b712a740604484b39990f1de39e4b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c4f30a389c34a2177a7f2aa60a69b2494c5f08fa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
131e345b6847f10cb4a59ca4c748224d8bbe3cab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6151bb5fea5811277d051a81865b946d76a92fba
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc9308e5d855dc04dc81990c2901b6e0b6e98102
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c3601dde87abf89382c8b3ac74d500b5e636560a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
850a663a5e911e819a8216a9405d84ea3cf3cdab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c31365682523aa25abff879b5820f21515909fcf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
469428cf55bae3fc3dafdc8848a85ddb557815a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae97c08cc818688980444c713d5573b5cd6a610a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b8f64ffc6b13d72ac52c05192d357d1cebd1737
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
33df4d3be256e03df6dbb90b9f112de7ad6d093f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7bd5d2814970330a905d5e604e7cfa185d79f30d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
47f037064b8185131aae429305098113ad679421
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d4a3b547ca5aa058a975f870f21ddf64fc840db
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a5fec14685428f641abd61cb6a1d8554e1790a16
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc9bfdeea2193f5911209481176c4672c38339e8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
afb32f27e0ab32b46952ee043c169b34eec5a1d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8b133e5b26e79f9b6bac51b6309a95262b1f3840
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5246a842d48645da15d35f7f1b9aafc6aeda2d2c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eef4f191c63bfba0883f37410de72d54cfb4f13d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5b13e9ab0a021f86889a39cf45b413384009a4ab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1b8e4e448228b12a674c205a7288389613271e7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
04c27e5d4b28b520e4d9e874610b15b7dc54c74e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2e5d0ff8ba15844e22c1a4faaa3bd71263dff0bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9361501a61949c5778ef3506763c21effe3b66b7
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.04.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.04.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.04-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.04-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.04.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.04.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.04.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.04.3"
        }
    ]
}

Affected versions

1.*
1.0.0ALPHA1_RELEASE
1.0.0ALPHA2_RELEASE
1.0.0BETA2_RELEASE
1.1.0ALPHA1_RELEASE
1.1.0ALPHA2_RELEASE
1.1.0ALPHA3_RELEASE
1.1.0BETA2_RELEASE
1.1.0BETA4_RELEASE
1.2.0ALPHA2_RELEASE
1.2.0ALPHA3_RELEASE
1.3.0BETA1_RELEASE
1.3.0BETA2_RELEASE
1.4.0ALPHA1_RELEASE
1.7RC1_RELEASE
1.8RC1_RELEASE
1.8RC2_RELEASE
15.*
15.04.0_RELEASE
15.04.10_RELEASE
15.04.11_RELEASE
15.04.12_RELEASE
15.04.13_RELEASE
15.04.14_RELEASE
15.04.1_RELEASE
15.04.2_RELEASE
15.04.3_RELEASE
15.04.4_RELEASE
15.04.5_RELEASE
15.04.6_RELEASE
15.04.7_RELEASE
15.04.8_RELEASE
15.04.9_RELEASE
15.04RC1_RELEASE
15.04RC2_RELEASE
16.*
16.04.0_RELEASE
16.04.1_RELEASE
16.04.2_RELEASE
16.04.3_RELEASE
16.04.4_RELEASE
16.04.5_RELEASE
16.04.6_RELEASE
16.04.7_RELEASE
16.04.8_RELEASE
16.04RC1_RELEASE
16.04RC2_RELEASE
16.10.0_RELEASE
16.10.1_RELEASE
16.10.2_RELEASE
16.10.3_RELEASE
16.10.4_RELEASE
16.10.5_RELEASE
16.10RC1_RELEASE
16.10RC2_RELEASE
17.*
17.04.0_RELEASE
17.04.1_RELEASE
17.04.2_RELEASE
17.04.3_RELEASE
17.04RC1_RELEASE
17.04RC2_RELEASE

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14752.json"