Vulnerability Details CVE-2009-2171
Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.6%
CVSS Severity
CVSS v2 Score 4.0
Products affected by CVE-2009-2171
-
cpe:2.3:a:mahara:mahara:1.1
-
cpe:2.3:a:mahara:mahara:1.1.1
-
cpe:2.3:a:mahara:mahara:1.1.2
-
cpe:2.3:a:mahara:mahara:1.1.3
-
cpe:2.3:a:mahara:mahara:1.1.4