VULNERABILITY INTELLIGENCE

CVE-2011-1403

CVSS score6.8 MEDIUM
EPSS probability1.03%
CISA KEVNot currently listed
Published2011-05-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references