CVE-2018-11195

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-11195
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-11195.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-11195
Published
2018-06-01T19:29:00.223Z
Modified
2026-02-03T06:59:28.544537Z
Severity
  • 6.8 (Medium) CVSS_V3 - CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara credentials.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
7e3e132425fc023eb85e66717284540d80bdacd1
Fixed
101db724b6cdbbb6ab5c4f8dfe45274e0f437a21
Introduced
c1b8e4e448228b12a674c205a7288389613271e7
Fixed
4731adeec17713177b730a94b9191c0725339da2

Affected versions

17.*
17.04.0_RELEASE
17.04.1_RELEASE
17.04.2_RELEASE
17.04.3_RELEASE
17.04.4_RELEASE
17.04.5_RELEASE
17.04.6_RELEASE
17.04.7_RELEASE
17.10.0_RELEASE
17.10.1_RELEASE
17.10.2_RELEASE
17.10.3_RELEASE
17.10.4_RELEASE

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-11195.json"