CVE-2024-39335

—

CVSS 3.1

9.1 critical

EPSS

<1%p25

Published

Aug 26, 2025 (Aug 26, 2025)

Modified

Jun 17, 2026

Description

Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions.

Vendors: mahara
Products: mahara
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.