CVE-2011-2774

The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2011-11-15

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Mahara (Mahara)

References

• http://secunia.com/advisories/46719
• https://launchpad.net/bugs/798128
• https://launchpad.net/mahara/+milestone/1.4.1