← Database

CVE-2024-39335

CRITICAL CVSS: 9.1 Published: 2025-08-26 Modified: 2026-06-17

Description

Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions.

Affected Platforms

Mahara Mahara

Weakness Type

CWE-200

References