CVE-2022-28892

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-04-28

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Mahara (Mahara)

References

• https://bugs.launchpad.net/mahara/+bug/1930171
• https://mahara.org/interaction/forum/topic.php?id=9094