Forums | Mahara Community
Security Announcements
/
Security issue relating to Access control and Leap2a export <15.04.8, <15.10.4, <16.04.2
11 July 2016, 17:02
A user could in some circumstances cause another user's artefacts to be included in a Leap2a export of their own pages.
Category: Access control
Severity: Medium
Versions affected: <15.04.8, <15.10.4, <16.04.2
Reported by: Tom Forbes
Bug reports: https://bugs.launchpad.net/mahara/+bug/1234615
CVE reference: 2017-1000133
Edits to this post:
- Kristina Hoeppner - 08 November 2017, 16:49