Back to search
CVE-2020-9387
Published: Apr 30, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://bugs.launchpad.net/mahara/+bug/1836984
x_refsource_CONFIRM
https://mahara.org/interaction/forum/topic.php?id=8612
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now