Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mahara ‘Reply to message’功能信息泄露漏洞
Vulnerability Description
Catalyst Mahara是新西兰Catalyst IT公司的一套社交网络系统。该系统包含博客、履历表生成器、文件管理器等。 Mahara 1.3.x版本和1.4.1之前的1.4.x版本中的 “Reply to message”功能中存在信息泄露漏洞。远程认证用户可借助改进的replyto参数读取不同用户的消息。
CVSS Information
N/A
Vulnerability Type
N/A