PT-2017-10841
CVE-2017-1000140
·
Publicado
2017-11-03
·
Atualizado
2017-11-15
Descrição por
CVSS 3.1
5.4
MédiaMétricasAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Mahara versions 1.8 through 1.8.6
Mahara versions 1.9 through 1.9.4
Mahara versions 1.10 through 1.10.2
Mahara versions 15.04 before 15.04.0
Description
The issue allows a maliciously created .xml file to have its code executed when a user attempts to download the file.
Recommendations
For Mahara versions 1.8 through 1.8.6, update to version 1.8.7 or later.
For Mahara versions 1.9 through 1.9.4, update to version 1.9.5 or later.
For Mahara versions 1.10 through 1.10.2, update to version 1.10.3 or later.
For Mahara versions 15.04 before 15.04.0, update to version 15.04.0 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾