CVE-2017-1000150

—

CVSS 3.0

8.8 high

EPSS

<1%p56

Published

Nov 3, 2017 (Nov 3, 2017)

Modified

Jun 17, 2026

Description

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.

Vendors: mahara
Products: mahara
Weakness: CWE-384
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.