VULNERABILITY INTELLIGENCE

CVE-2018-11565

CVSS score5.3 MEDIUM

EPSS probability0.89%

CISA KEVNot currently listed

Published2018-05-30

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

cve@mitre.org — Issue Tracking, Patch, Vendor Advisory
cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory