What’s Vulnerable › Vulnerabilities
CVE-2017-1000155
- Severity: medium (CVSS 4.3 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-11-03 · updated 2026-06-17
- Weakness: CWE-200
Description
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being accessed without any access control checks consequently allowing any of a user's uploaded profile pictures to be viewable by anyone, whether or not they were currently selected as the "default" or used in any pages.
Affected products
- mahara: 15.04-rc1, 15.04-rc2, 15.04.0, 15.04.1, 15.04.2, 15.04.3 (+12)
References
Get alerted when CVE-2017-1000155 or the next vulnerability affects your stack