CVE-2017-1000147 | BDVDB-2026-92561 Detail

Description#

Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the uploader contained in Mahara's filebrowser widget. This could allow an attacker to trick a Mahara user into unknowingly uploading malicious files into their Mahara account.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-11-03Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.