| Package | Affected versions | Patched versions |
|---|---|---|
| mahara | = 1.5= 1.5.0= 1.5.1= 1.5.10= 1.5.2= 1.5.3= 1.5.4= 1.5.6= 1.5.7= 1.5.8= 1.5.9= 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.7.= 1.7.0= 1.7.1= 1.7.2≤ 1.5.11 |
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free