NVD

Id
40038  
Name
CVE-2013-4431  
Description
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-05-19  
Modified Date
2014-05-19  
Seq
2013-4431  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203701 40038 CVE-2013-4431 [oss-security] 20131008 CVE request: mahara 1.7.3  View
203702 40038 CVE-2013-4431 [oss-security] 20131015 Re: CVE request: mahara 1.7.3  View
203703 40038 CVE-2013-4431 [oss-security] 20131015 Re: Re: CVE request: mahara 1.7.3  View
203704 40038 CVE-2013-4431 https://bugs.launchpad.net/mahara/+bug/1233500  View
203705 40038 CVE-2013-4431 https://mahara.org/interaction/forum/topic.php?id=5753  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24895 JVNDB-2013-006470 Mahara における任意のブロックを変更される脆弱性 Mahara には、ブロックに対するアクセスを適切に制限しないため、任意のブロックを変更される脆弱性が存在します。 CVE-2013-4431 64373 CVE-2013-4431 40038 5.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006470.html 2013-10-03 2014-05-20 View