CVE-2022-24694

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p53

Published

Feb 9, 2022 (Feb 9, 2022)

Modified

Jun 17, 2026

Description

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents are affected.)

Vendors: mahara
Products: mahara
Weakness: CWE-552
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.