| Package | Affected versions | Patched versions |
|---|---|---|
| mahara | = 1.10= 1.10.0= 1.10.1= 1.10.2= 1.10.3= 1.10.4= 1.10.5= 1.9= 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4= 1.9.5= 1.9.6= 1.9.7= 15.04= 15.04.0= 15.04.1= 15.04.2 |
Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the uploader contained in Mahara's filebrowser widget. This could allow an attacker to trick a Mahara user into unknowingly uploading malicious files into their Mahara account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free