CVE-2021-43264

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-43264
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-43264.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-43264
Published
2021-11-02T22:15:09Z
Modified
2025-01-14T09:59:31.154898Z
Severity
  • 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events

Affected versions

20.*

20.04.0_RELEASE
20.04.1_RELEASE
20.04.2_RELEASE
20.04.3_RELEASE
20.04.4_RELEASE