OpenCVE

Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger a remote shell if the site is running on Ubuntu and the flag -dSAFER is not set with Ghostscript.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Canonical	Ubuntu Linux
Mahara	Mahara

Configuration 1 [-]

AND

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:*:*:*:*

OR	cpe:2.3:a:mahara:mahara::::::::
	cpe:2.3:a:mahara:mahara::::::::
	cpe:2.3:a:mahara:mahara::::::::
	cpe:2.3:a:mahara:mahara:22.10.0:rc1::::::

No data.

References

Link	Providers
https://bugs.launchpad.net/mahara/+bug/1979575
https://mahara.org/interaction/forum/topic.php?id=9198

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-11-06T00:00:00

Updated: 2024-08-03T13:54:03.669Z

Reserved: 2022-11-01T00:00:00

Link: CVE-2022-44544

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2022-11-06T17:15:10.220

Modified: 2022-11-10T06:45:28.510

Link: CVE-2022-44544

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:*:*:*:*", "matchCriteriaId": "B85E9B9B-ADDB-4D2F-A857-685BD30CE856", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*", "matchCriteriaId": "29BF62C0-9CEF-4EBF-B635-67F416C2F692", "versionEndExcluding": "21.04.7", "versionStartIncluding": "21.04.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*", "matchCriteriaId": "4113D84F-96F1-4185-BD2A-65F4B444BFD1", "versionEndExcluding": "21.10.5", "versionStartIncluding": "21.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*", "matchCriteriaId": "AC3CBE95-58A0-407F-805F-5FA142197EA5", "versionEndExcluding": "22.04.3", "versionStartIncluding": "22.04.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:22.10.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "382558E9-D245-4AA5-ABE8-3CBDEA139099", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger a remote shell if the site is running on Ubuntu and the flag -dSAFER is not set with Ghostscript."}, {"lang": "es", "value": "Mahara 21.04 antes de 21.04.7, 21.10 antes de 21.10.5, 22.04 antes de 22.04.3 y 22.10 antes de 22.10.0 potencialmente permiten que una exportaci\u00f3n de PDF active un shell remoto si el sitio se ejecuta en Ubuntu y el indicador -dSAFER no est\u00e1 configurado con Ghostscript."}], "id": "CVE-2022-44544", "lastModified": "2022-11-10T06:45:28.510", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-11-06T17:15:10.220", "references": [{"source": "cve@mitre.org", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugs.launchpad.net/mahara/+bug/1979575"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://mahara.org/interaction/forum/topic.php?id=9198"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}