CVE-2011-0440

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-28 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs.

Affected products

mahara: 1.2.0, 1.2.0-alpha1, 1.2.0-alpha2, 1.2.0-alpha3, 1.2.0-beta1, 1.2.0-beta2 (+18)

References

http://mahara.org/interaction/forum/topic.php?id=3206
http://mahara.org/interaction/forum/topic.php?id=3208
http://secunia.com/advisories/43858
http://www.debian.org/security/2011/dsa-2206
http://www.securityfocus.com/bid/47033
https://exchange.xforce.ibmcloud.com/vulnerabilities/66326
http://mahara.org/interaction/forum/topic.php?id=3206
http://mahara.org/interaction/forum/topic.php?id=3208
http://secunia.com/advisories/43858
http://www.debian.org/security/2011/dsa-2206
http://www.securityfocus.com/bid/47033
https://exchange.xforce.ibmcloud.com/vulnerabilities/66326

Get alerted when CVE-2011-0440 or the next vulnerability affects your stack