Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-14752

Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as escalation of privileges or unknown execution of malicious code when replying to messages in Mahara.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.6%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
Products affected by CVE-2017-14752
  • Mahara » Mahara » Version: 15.04
    cpe:2.3:a:mahara:mahara:15.04
  • Mahara » Mahara » Version: 15.04.0
    cpe:2.3:a:mahara:mahara:15.04.0
  • Mahara » Mahara » Version: 15.04.1
    cpe:2.3:a:mahara:mahara:15.04.1
  • Mahara » Mahara » Version: 15.04.10
    cpe:2.3:a:mahara:mahara:15.04.10
  • Mahara » Mahara » Version: 15.04.11
    cpe:2.3:a:mahara:mahara:15.04.11
  • Mahara » Mahara » Version: 15.04.12
    cpe:2.3:a:mahara:mahara:15.04.12
  • Mahara » Mahara » Version: 15.04.13
    cpe:2.3:a:mahara:mahara:15.04.13
  • Mahara » Mahara » Version: 15.04.14
    cpe:2.3:a:mahara:mahara:15.04.14
  • Mahara » Mahara » Version: 15.04.2
    cpe:2.3:a:mahara:mahara:15.04.2
  • Mahara » Mahara » Version: 15.04.3
    cpe:2.3:a:mahara:mahara:15.04.3
  • Mahara » Mahara » Version: 15.04.4
    cpe:2.3:a:mahara:mahara:15.04.4
  • Mahara » Mahara » Version: 15.04.5
    cpe:2.3:a:mahara:mahara:15.04.5
  • Mahara » Mahara » Version: 15.04.6
    cpe:2.3:a:mahara:mahara:15.04.6
  • Mahara » Mahara » Version: 15.04.7
    cpe:2.3:a:mahara:mahara:15.04.7
  • Mahara » Mahara » Version: 15.04.8
    cpe:2.3:a:mahara:mahara:15.04.8
  • Mahara » Mahara » Version: 15.04.9
    cpe:2.3:a:mahara:mahara:15.04.9
  • Mahara » Mahara » Version: 16.04
    cpe:2.3:a:mahara:mahara:16.04
  • Mahara » Mahara » Version: 16.04.0
    cpe:2.3:a:mahara:mahara:16.04.0
  • Mahara » Mahara » Version: 16.04.1
    cpe:2.3:a:mahara:mahara:16.04.1
  • Mahara » Mahara » Version: 16.04.2
    cpe:2.3:a:mahara:mahara:16.04.2
  • Mahara » Mahara » Version: 16.04.3
    cpe:2.3:a:mahara:mahara:16.04.3
  • Mahara » Mahara » Version: 16.04.4
    cpe:2.3:a:mahara:mahara:16.04.4
  • Mahara » Mahara » Version: 16.04.5
    cpe:2.3:a:mahara:mahara:16.04.5
  • Mahara » Mahara » Version: 16.04.6
    cpe:2.3:a:mahara:mahara:16.04.6
  • Mahara » Mahara » Version: 16.04.7
    cpe:2.3:a:mahara:mahara:16.04.7
  • Mahara » Mahara » Version: 16.04.8
    cpe:2.3:a:mahara:mahara:16.04.8
  • Mahara » Mahara » Version: 16.10
    cpe:2.3:a:mahara:mahara:16.10
  • Mahara » Mahara » Version: 16.10.0
    cpe:2.3:a:mahara:mahara:16.10.0
  • Mahara » Mahara » Version: 16.10.1
    cpe:2.3:a:mahara:mahara:16.10.1
  • Mahara » Mahara » Version: 16.10.2
    cpe:2.3:a:mahara:mahara:16.10.2
  • Mahara » Mahara » Version: 16.10.3
    cpe:2.3:a:mahara:mahara:16.10.3
  • Mahara » Mahara » Version: 16.10.4
    cpe:2.3:a:mahara:mahara:16.10.4
  • Mahara » Mahara » Version: 16.10.5
    cpe:2.3:a:mahara:mahara:16.10.5
  • Mahara » Mahara » Version: 17.04
    cpe:2.3:a:mahara:mahara:17.04
  • Mahara » Mahara » Version: 17.04.0
    cpe:2.3:a:mahara:mahara:17.04.0
  • Mahara » Mahara » Version: 17.04.1
    cpe:2.3:a:mahara:mahara:17.04.1
  • Mahara » Mahara » Version: 17.04.2
    cpe:2.3:a:mahara:mahara:17.04.2
  • Mahara » Mahara » Version: 17.04.3
    cpe:2.3:a:mahara:mahara:17.04.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved