CVE-2020-9386 | BDVDB-2026-131815 Detail

Description#

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.launchpad.net/mahara/+bug/1840201
https://mahara.org/interaction/forum/topic.php?id=8589

Exploit#

No public exploit known

History#

Version 12020-03-09Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.