CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4432

Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary folders (1) by leveraging an active folder tab loaded before permissions were removed or (2) via the folder parameter to artefact/file/groupfiles.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.4%

CVSS Severity

CVSS v2 Score 4.0

References

Products affected by CVE-2013-4432

Mahara » Mahara » Version: N/A

cpe:2.3:a:mahara:mahara:-
Mahara » Mahara » Version: 0.9.0

cpe:2.3:a:mahara:mahara:0.9.0
Mahara » Mahara » Version: 0.9.1

cpe:2.3:a:mahara:mahara:0.9.1
Mahara » Mahara » Version: 0.9.2

cpe:2.3:a:mahara:mahara:0.9.2
Mahara » Mahara » Version: 1.0.0

cpe:2.3:a:mahara:mahara:1.0.0
Mahara » Mahara » Version: 1.0.1

cpe:2.3:a:mahara:mahara:1.0.1
Mahara » Mahara » Version: 1.0.10

cpe:2.3:a:mahara:mahara:1.0.10
Mahara » Mahara » Version: 1.0.11

cpe:2.3:a:mahara:mahara:1.0.11
Mahara » Mahara » Version: 1.0.12

cpe:2.3:a:mahara:mahara:1.0.12
Mahara » Mahara » Version: 1.0.13

cpe:2.3:a:mahara:mahara:1.0.13
Mahara » Mahara » Version: 1.0.14

cpe:2.3:a:mahara:mahara:1.0.14
Mahara » Mahara » Version: 1.0.15

cpe:2.3:a:mahara:mahara:1.0.15
Mahara » Mahara » Version: 1.0.2

cpe:2.3:a:mahara:mahara:1.0.2
Mahara » Mahara » Version: 1.0.3

cpe:2.3:a:mahara:mahara:1.0.3
Mahara » Mahara » Version: 1.0.4

cpe:2.3:a:mahara:mahara:1.0.4
Mahara » Mahara » Version: 1.0.5

cpe:2.3:a:mahara:mahara:1.0.5
Mahara » Mahara » Version: 1.0.6

cpe:2.3:a:mahara:mahara:1.0.6
Mahara » Mahara » Version: 1.0.7

cpe:2.3:a:mahara:mahara:1.0.7
Mahara » Mahara » Version: 1.0.8

cpe:2.3:a:mahara:mahara:1.0.8
Mahara » Mahara » Version: 1.0.9

cpe:2.3:a:mahara:mahara:1.0.9
Mahara » Mahara » Version: 1.1

cpe:2.3:a:mahara:mahara:1.1
Mahara » Mahara » Version: 1.1.0

cpe:2.3:a:mahara:mahara:1.1.0
Mahara » Mahara » Version: 1.1.1

cpe:2.3:a:mahara:mahara:1.1.1
Mahara » Mahara » Version: 1.1.2

cpe:2.3:a:mahara:mahara:1.1.2
Mahara » Mahara » Version: 1.1.3

cpe:2.3:a:mahara:mahara:1.1.3
Mahara » Mahara » Version: 1.1.4

cpe:2.3:a:mahara:mahara:1.1.4
Mahara » Mahara » Version: 1.1.5

cpe:2.3:a:mahara:mahara:1.1.5
Mahara » Mahara » Version: 1.1.6

cpe:2.3:a:mahara:mahara:1.1.6
Mahara » Mahara » Version: 1.1.7

cpe:2.3:a:mahara:mahara:1.1.7
Mahara » Mahara » Version: 1.1.8

cpe:2.3:a:mahara:mahara:1.1.8
Mahara » Mahara » Version: 1.1.9

cpe:2.3:a:mahara:mahara:1.1.9
Mahara » Mahara » Version: 1.2.0

cpe:2.3:a:mahara:mahara:1.2.0
Mahara » Mahara » Version: 1.2.1

cpe:2.3:a:mahara:mahara:1.2.1
Mahara » Mahara » Version: 1.2.2

cpe:2.3:a:mahara:mahara:1.2.2
Mahara » Mahara » Version: 1.2.3

cpe:2.3:a:mahara:mahara:1.2.3
Mahara » Mahara » Version: 1.2.4

cpe:2.3:a:mahara:mahara:1.2.4
Mahara » Mahara » Version: 1.2.5

cpe:2.3:a:mahara:mahara:1.2.5
Mahara » Mahara » Version: 1.2.6

cpe:2.3:a:mahara:mahara:1.2.6
Mahara » Mahara » Version: 1.2.7

cpe:2.3:a:mahara:mahara:1.2.7
Mahara » Mahara » Version: 1.2.8

cpe:2.3:a:mahara:mahara:1.2.8
Mahara » Mahara » Version: 1.2.9

cpe:2.3:a:mahara:mahara:1.2.9
Mahara » Mahara » Version: 1.3.0

cpe:2.3:a:mahara:mahara:1.3.0
Mahara » Mahara » Version: 1.3.1

cpe:2.3:a:mahara:mahara:1.3.1
Mahara » Mahara » Version: 1.3.2

cpe:2.3:a:mahara:mahara:1.3.2
Mahara » Mahara » Version: 1.3.3

cpe:2.3:a:mahara:mahara:1.3.3
Mahara » Mahara » Version: 1.3.4

cpe:2.3:a:mahara:mahara:1.3.4
Mahara » Mahara » Version: 1.3.5

cpe:2.3:a:mahara:mahara:1.3.5
Mahara » Mahara » Version: 1.3.6

cpe:2.3:a:mahara:mahara:1.3.6
Mahara » Mahara » Version: 1.3.7

cpe:2.3:a:mahara:mahara:1.3.7
Mahara » Mahara » Version: 1.3.8

cpe:2.3:a:mahara:mahara:1.3.8
Mahara » Mahara » Version: 1.4

cpe:2.3:a:mahara:mahara:1.4
Mahara » Mahara » Version: 1.4.0

cpe:2.3:a:mahara:mahara:1.4.0
Mahara » Mahara » Version: 1.4.1

cpe:2.3:a:mahara:mahara:1.4.1
Mahara » Mahara » Version: 1.4.2

cpe:2.3:a:mahara:mahara:1.4.2
Mahara » Mahara » Version: 1.4.3

cpe:2.3:a:mahara:mahara:1.4.3
Mahara » Mahara » Version: 1.4.4

cpe:2.3:a:mahara:mahara:1.4.4
Mahara » Mahara » Version: 1.4.5

cpe:2.3:a:mahara:mahara:1.4.5
Mahara » Mahara » Version: 1.4.6

cpe:2.3:a:mahara:mahara:1.4.6
Mahara » Mahara » Version: 1.5

cpe:2.3:a:mahara:mahara:1.5
Mahara » Mahara » Version: 1.5.0

cpe:2.3:a:mahara:mahara:1.5.0
Mahara » Mahara » Version: 1.5.1

cpe:2.3:a:mahara:mahara:1.5.1
Mahara » Mahara » Version: 1.5.10

cpe:2.3:a:mahara:mahara:1.5.10
Mahara » Mahara » Version: 1.5.11

cpe:2.3:a:mahara:mahara:1.5.11
Mahara » Mahara » Version: 1.5.12

cpe:2.3:a:mahara:mahara:1.5.12
Mahara » Mahara » Version: 1.5.2

cpe:2.3:a:mahara:mahara:1.5.2
Mahara » Mahara » Version: 1.5.3

cpe:2.3:a:mahara:mahara:1.5.3
Mahara » Mahara » Version: 1.5.4

cpe:2.3:a:mahara:mahara:1.5.4
Mahara » Mahara » Version: 1.5.6

cpe:2.3:a:mahara:mahara:1.5.6
Mahara » Mahara » Version: 1.5.7

cpe:2.3:a:mahara:mahara:1.5.7
Mahara » Mahara » Version: 1.5.8

cpe:2.3:a:mahara:mahara:1.5.8
Mahara » Mahara » Version: 1.5.9

cpe:2.3:a:mahara:mahara:1.5.9
Mahara » Mahara » Version: 1.6.0

cpe:2.3:a:mahara:mahara:1.6.0
Mahara » Mahara » Version: 1.6.1

cpe:2.3:a:mahara:mahara:1.6.1
Mahara » Mahara » Version: 1.6.2

cpe:2.3:a:mahara:mahara:1.6.2
Mahara » Mahara » Version: 1.6.3

cpe:2.3:a:mahara:mahara:1.6.3
Mahara » Mahara » Version: 1.6.4

cpe:2.3:a:mahara:mahara:1.6.4
Mahara » Mahara » Version: 1.6.5

cpe:2.3:a:mahara:mahara:1.6.5
Mahara » Mahara » Version: 1.6.6

cpe:2.3:a:mahara:mahara:1.6.6
Mahara » Mahara » Version: 1.6.7

cpe:2.3:a:mahara:mahara:1.6.7
Mahara » Mahara » Version: 1.7.

cpe:2.3:a:mahara:mahara:1.7.
Mahara » Mahara » Version: 1.7.0

cpe:2.3:a:mahara:mahara:1.7.0
Mahara » Mahara » Version: 1.7.1

cpe:2.3:a:mahara:mahara:1.7.1
Mahara » Mahara » Version: 1.7.2

cpe:2.3:a:mahara:mahara:1.7.2
Mahara » Mahara » Version: 1.7.3

cpe:2.3:a:mahara:mahara:1.7.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4432

Products

Pricing

Contact Us