CVE-2024-39335

CVSS 9.1 CRITICALEPSS 0.3%CWE-200

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.1EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 ago 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Productos afectados

n/a · n/a

Referencias

https://mahara.org/interaction/forum/topic.php?id=9519 https://mahara.org/interaction/forum/view.php?id=43