CVE-2013-4431 | BDVDB-2026-61640 Detail

Description#

Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://mahara.org/interaction/forum/topic.php?id=5753
http://www.openwall.com/lists/oss-security/2013/10/08/3
http://www.openwall.com/lists/oss-security/2013/10/15/1
http://www.openwall.com/lists/oss-security/2013/10/16/7
https://bugs.launchpad.net/mahara/+bug/1233500

Exploit#

No public exploit known

History#

Version 12014-05-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.