CVE-2021-43266

PoC —

CVSS 3.1

7.3 high

EPSS

1%p69

Published

Nov 2, 2021 (Nov 2, 2021)

Modified

Jun 17, 2026

Description

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution

Vendors: mahara
Products: mahara
Weakness: CWE-78
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.