CVE-2022-45133
Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XML file could allow one to traverse the server to obtain access to secure files or cause code execution based on the payload.
| Software | From | Fixed in |
|---|---|---|
| mahara / mahara | 21.10.0 | 21.10.6 |
| mahara / mahara | 22.04.0 | 22.04.4 |
| mahara / mahara | 22.10.0 | 22.10.1 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime