VULNERABILITY INTELLIGENCE

CVE-2011-0440

CVSS score5.8 MEDIUM

EPSS probability1.03%

CISA KEVNot currently listed

Published2011-03-28

Last modified2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs.