Mahara Community

Security Announcements

Subscribe to this forum to be notified about security fixes.

Topics

Topic	Poster	Posts	Last post
READ ME: Security Announcements This forum is for announcing security vulnerabi...	Nigel	1	03 Feb, 2:05 by Nigel
XSS in HTML Purifier 4.0 and earlier Category: Cross-site scripting Seve...	François Marier	1	02 Jul, 0:10 by François Marier
Unsafe authentication plugin options in Mahara 1.0.14, 1.1.8 and 1.2.4 Category: Unsafe auth plugin options ...	François Marier	1	02 Jul, 0:08 by François Marier
SQL injection in 1.1.8 and 1.2.4 Category: SQL injection Severity: ...	François Marier	1	02 Jul, 0:05 by François Marier
Multiple CSRF in Mahara 1.0.14, 1.1.8 and 1.2.4 Category: Cross-site request forgery ...	François Marier	1	02 Jul, 0:03 by François Marier
Multiple XSS in Mahara 1.0.14, 1.1.8 and 1.2.4 Category: Cross-site scripting Seve...	François Marier	1	02 Jul, 0:00 by François Marier
SQL injection in 1.0.13, 1.1.7 and 1.2.3 Category: SQL injection	François Marier	1	06 Apr, 0:07 by François Marier
Arbitrary code execution in 1.0.13 and 1.1.7 Category: Arbitrary code execution	François Marier	1	06 Apr, 0:03 by François Marier
XSS in Mahara 1.1.6 and 1.0.12 Category:Cross-site scripting Severity:Medium V...	François Marier	1	29 Oct, 17:34 by François Marier
Privilege escalation in Mahara 1.1.6 and 1.0.12 Category:Privilege escalation Severity:Major Ve...	François Marier	1	29 Oct, 17:31 by François Marier
Information disclosure in Mahara 1.1.4 Category:Information disclosure Severity:Major ...	François Marier	1	21 Jun, 23:01 by François Marier
XSS in Mahara 1.0.11 and 1.1.4 Category:Cross-site scripting Severity:Major Ve...	François Marier	1	21 Jun, 22:51 by François Marier
Remote code execution in Mahara 1.1.2 Category:Remote code execution Severity:Major ...	François Marier	1	22 Apr, 1:09 by François Marier
XSS in Mahara 1.0.10 and 1.1.2 Category:Cross-site scripting Severity:Major Ve...	François Marier	1	22 Apr, 1:03 by François Marier
Multiple XSS vulnerabilities in Mahara 1.0.9 and 1.1.1 Category:Cross-site scripting Severity:Major Ve...	François Marier	1	10 Mar, 3:34 by François Marier