← Database

CVE-2022-28892

HIGH CVSS: 8.8 Published: 2022-04-28 Modified: 2026-06-17

Description

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.

Affected Platforms

Mahara Mahara

Weakness Type

CWE-352

References