CVE-2017-1000171

Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-11-03

Last modified

2024-08-05

Weaknesses

CWE-532

Affected products

• Mahara Mobile (Mahara)

References

• https://github.com/MaharaProject/mahara-mobile/issues/33