In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used. They are all shown from page 2 of the group results list (rather than only being shown for the institution that the viewer is a member of).
References
Link | Resource |
---|---|
https://bugs.launchpad.net/mahara/+bug/1922226 | Vendor Advisory |
https://mahara.org/interaction/forum/topic.php?id=9093 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-04-28T15:29:25
Updated: 2022-04-28T15:29:25
Reserved: 2022-04-22T00:00:00
Link: CVE-2022-29585
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-04-28T16:15:08.543
Modified: 2022-05-09T18:15:00.983
Link: CVE-2022-29585
JSON object: View
Redhat Information
No data.
CWE