CVE-2024-47192中 5.3An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files th…
CVE-2024-35203中 6.1Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is …
CVE-2024-39335緊急 9.1Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution a…
CVE-2025-29992高 7.5Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being te…
CVE-2024-47853高 8.8An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mah…