CVE-2018-11195 | BDVDB-2026-101545 Detail

Description#

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara credentials.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.launchpad.net/mahara/+bug/1770561
https://mahara.org/interaction/forum/topic.php?id=8269

Exploit#

No public exploit known

History#

Version 12018-06-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.