CVE-2022-24111

—

CVSS 3.1

5.3 medium

EPSS

<1%p56

Published

Feb 10, 2022 (Feb 10, 2022)

Modified

Jun 17, 2026

Description

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.

Vendors: mahara
Products: mahara
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.