CVE-2020-9387

Source
https://cve.org/CVERecord?id=CVE-2020-9387
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-9387.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-9387
Published
2020-04-30T13:15:13Z
Modified
2026-02-11T12:48:52Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected versions

19.*
19.04.0_RELEASE
19.04.1_RELEASE
19.04.2_RELEASE
19.04.3_RELEASE
19.04.4_RELEASE
19.10.0_RELEASE
19.10.1_RELEASE
19.10.2_RELEASE

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-9387.json"