Total vulnerabilities in the database
Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.
| Software | From | Fixed in |
|---|---|---|
| mahara / mahara | 1.1.2 | 1.1.2.x |
| mahara / mahara | 1.1 | 1.1.x |
| mahara / mahara | 1.1.4 | 1.1.4.x |
| mahara / mahara | 1.1.1 | 1.1.1.x |
| mahara / mahara | 1.1.3 | 1.1.3.x |