In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and... · CVE-2022-24694 · GitHub Advisory Database · GitHub

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and...

Moderate severity Unreviewed Published Feb 10, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents are affected.)

References

Published by the National Vulnerability Database

Feb 9, 2022

Published to the GitHub Advisory Database Feb 10, 2022

Last updated Feb 3, 2023