CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2009-06-23

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Mahara (Mahara)

References

• http://mahara.org/interaction/forum/topic.php?id=753