Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-04-28T00:00:00
Updated: 2024-08-03T06:10:56.871Z
Reserved: 2022-04-11T00:00:00
Link: CVE-2022-28892
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-04-28T16:15:08.393
Modified: 2023-01-30T19:19:07.020
Link: CVE-2022-28892
Redhat
No data.