CVE-2024-35203

概要

参考情報

• git.mahara.org/catalyst-security/mahara-security/-/merge_requests/6 · Vendor Advisory
• mahara.org/interaction/forum/topic.php · Vendor Advisory

mahara のその他の脆弱性

• CVE-2024-47192中 5.3An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files th…
• CVE-2024-39335緊急 9.1Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution a…
• CVE-2025-29992高 7.5Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being te…
• CVE-2024-47853高 8.8An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mah…
• CVE-2024-45753中 6.1In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribu…