| Package | Affected versions | Patched versions |
|---|---|---|
| mahara | = 22.04.2≥ 21.04.0, < 21.04.6≥ 21.10.0, < 21.10.4 | 21.04.621.10.4 |
In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free