CVE-2021-40849 | BDVDB-2026-163733 Detail

Description#

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web services token is vulnerable to being exploited and logged into, resulting in information disclosure (at a minimum) and often escalation of privileges.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-11-03Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.