CVE-2018-11565

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-11565
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-11565.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-11565
Published
2018-05-30T21:29:00.690Z
Modified
2026-02-03T06:59:32.028720Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
7e3e132425fc023eb85e66717284540d80bdacd1
Fixed
101db724b6cdbbb6ab5c4f8dfe45274e0f437a21
Introduced
c1b8e4e448228b12a674c205a7288389613271e7
Fixed
4731adeec17713177b730a94b9191c0725339da2

Affected versions

17.*
17.04.0_RELEASE
17.04.1_RELEASE
17.04.2_RELEASE
17.04.3_RELEASE
17.04.4_RELEASE
17.04.5_RELEASE
17.04.6_RELEASE
17.04.7_RELEASE
17.10.0_RELEASE
17.10.1_RELEASE
17.10.2_RELEASE
17.10.3_RELEASE
17.10.4_RELEASE

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-11565.json"