Launchpad.net

CVE 2017-1000133

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages.

Related bugs and status

CVE-2017-1000133 (Candidate) is related to these bugs:

Bug #1234615: Not checking artefact permissions before exporting

		In	Importance	Status
1234615	Not checking artefact permissions before exporting	Mahara	Medium	Fix Released
1234615	Not checking artefact permissions before exporting	Mahara 1.10	Medium	Won't Fix
1234615	Not checking artefact permissions before exporting	Mahara 1.9	Medium	Won't Fix
1234615	Not checking artefact permissions before exporting	Mahara 15.04	Medium	Fix Released
1234615	Not checking artefact permissions before exporting	Mahara 15.10	Medium	Fix Released
1234615	Not checking artefact permissions before exporting	Mahara 16.04	Medium	Fix Released
1234615	Not checking artefact permissions before exporting	Mahara 16.10	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://bugs.launchpad...