CVE-2025-29992

—

CVSS 3.1

7.5 high

EPSS

<1%p25

Published

Aug 26, 2025 (Aug 26, 2025)

Modified

Jun 17, 2026

Description

Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.

Vendors: mahara
Products: mahara
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.