PT-2020-20569
CVE-2020-9282
·
Published
2020-03-09
·
Updated
2020-03-09
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mahara versions 18.10 through 18.10.4
Mahara versions 19.04 through 19.04.3
Mahara versions 19.10 through 19.10.1
Description
The issue allows certain personal information to be discoverable by inspecting network responses on the 'Edit access' screen when sharing portfolios.
Recommendations
For Mahara versions 18.10 through 18.10.4, update to version 18.10.5 or later.
For Mahara versions 19.04 through 19.04.3, update to version 19.04.4 or later.
For Mahara versions 19.10 through 19.10.1, update to version 19.10.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾