What’s Vulnerable › Vulnerabilities

CVE-2022-42707

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-06 · updated 2026-06-17
• Weakness: CWE-284

Description

In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images are accessible without a sufficient permission check under certain conditions.

Affected products

• mahara: from 21.04.0 before 21.04.7; from 21.10.0 before 21.10.5; from 22.04.0 before 22.04.3; 22.10.0-rc1 — fixed in 21.04.7, 21.10.5, 22.04.3

How to fix

Upgrade to a fixed version: mahara 21.04.7, 21.10.5, 22.04.3. Check the vendor advisory for mitigations.

References

• https://bugs.launchpad.net/mahara/+bug/1991157
• https://mahara.org/interaction/forum/topic.php?id=9199
• https://bugs.launchpad.net/mahara/+bug/1991157
• https://mahara.org/interaction/forum/topic.php?id=9199

Get alerted when CVE-2022-42707 or the next vulnerability affects your stack