Search vulnerabilities

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,897

CVE-2021-43265

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Mahara
Products
Mahara
CVE-2021-43264

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Mahara
Products
Mahara
CVE-2021-43257

Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mantisbt
Products
Mantisbt