CVE-2017-1000133 - Vulnerability Details

Vendors	Products
Mahara	Mahara

Link	Providers
https://bugs.launchpad.net/mahara/+bug/1234615

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "dateAssigned": "2017-08-22T00:00:00", "datePublic": "2017-11-03T00:00:00", "descriptions": [{"lang": "en", "value": "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-11-03T17:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://bugs.launchpad.net/mahara/+bug/1234615"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "DATE_ASSIGNED": "2017-08-22T17:29:33.345996", "ID": "CVE-2017-1000133", "REQUESTER": "info@mahara.org", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://bugs.launchpad.net/mahara/+bug/1234615", "refsource": "MISC", "url": "https://bugs.launchpad.net/mahara/+bug/1234615"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T21:53:06.699Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugs.launchpad.net/mahara/+bug/1234615"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-1000133", "datePublished": "2017-11-03T18:00:00", "dateReserved": "2017-11-02T00:00:00", "dateUpdated": "2024-08-05T21:53:06.699Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

dateAssigned : 2017-08-22T00:00:00 (string)

datePublic : 2017-11-03T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-11-03T17:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1234615 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

DATE_ASSIGNED : 2017-08-22T17:29:33.345996 (string)

ID : CVE-2017-1000133 (string)

REQUESTER : info@mahara.org (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://bugs.launchpad.net/mahara/+bug/1234615 (string)

refsource : MISC (string)

url : https://bugs.launchpad.net/mahara/+bug/1234615 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T21:53:06.699Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1234615 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2017-1000133 (string)

datePublished : 2017-11-03T18:00:00 (string)

dateReserved : 2017-11-02T00:00:00 (string)

dateUpdated : 2024-08-05T21:53:06.699Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*", "matchCriteriaId": "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*", "matchCriteriaId": "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*", "matchCriteriaId": "6932E7F9-BA51-4099-8987-8944E0284B7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*", "matchCriteriaId": "022D7031-54EF-484C-B076-15C4342532E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*", "matchCriteriaId": "6FFB08C5-151E-49D2-AC13-1018FF402569", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*", "matchCriteriaId": "853E7231-70C7-4A1F-817F-E43D78BCB060", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*", "matchCriteriaId": "96E14503-4E8B-44F5-9CAB-EF074CA71862", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*", "matchCriteriaId": "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*", "matchCriteriaId": "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*", "matchCriteriaId": "00782DDD-90C9-410F-A810-F5632AD25132", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*", "matchCriteriaId": "C1C7261F-8712-4405-A1C0-C36FD9BE64EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*", "matchCriteriaId": "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*", "matchCriteriaId": "6C6F378F-9282-46B4-BF84-B08418C2B592", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*", "matchCriteriaId": "28E5C4FE-5195-40FA-8580-2AF84D370B2F", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "609A3054-6DA9-44A8-9927-29E181D4D07F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "E5E8584F-8CD3-415C-BFC0-DC825089CA42", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "023729FA-BEA6-4D89-87B3-C91A7FBDDD46", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:*", "matchCriteriaId": "7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages."}, {"lang": "es", "value": "Mahara, en versiones 15.04 anteriores a la 15.04.8, versiones 15.10 anteriores a la 15.10.4 y versiones 16.04 anteriores a la 16.04.2, es vulnerable a que, en algunas circunstancias, un usuario provoque que se incluyan los artefactos de otro usuario en una exportaci\u00f3n Leap2a de sus propias p\u00e1ginas."}], "id": "CVE-2017-1000133", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-11-03T18:29:00.277", "references": [{"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugs.launchpad.net/mahara/+bug/1234615"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugs.launchpad.net/mahara/+bug/1234615"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:* (string)

matchCriteriaId : DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 313A5DDA-204F-4ED3-BE22-FA0D8A239BC7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6932E7F9-BA51-4099-8987-8944E0284B7B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 022D7031-54EF-484C-B076-15C4342532E3 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 6FFB08C5-151E-49D2-AC13-1018FF402569 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 853E7231-70C7-4A1F-817F-E43D78BCB060 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 96E14503-4E8B-44F5-9CAB-EF074CA71862 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 00782DDD-90C9-410F-A810-F5632AD25132 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:* (string)

matchCriteriaId : C1C7261F-8712-4405-A1C0-C36FD9BE64EF (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 74C6846C-42FB-454E-B4BA-0DAA43C1A0C3 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C6F378F-9282-46B4-BF84-B08418C2B592 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 28E5C4FE-5195-40FA-8580-2AF84D370B2F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 609A3054-6DA9-44A8-9927-29E181D4D07F (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:* (string)

matchCriteriaId : E5E8584F-8CD3-415C-BFC0-DC825089CA42 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 023729FA-BEA6-4D89-87B3-C91A7FBDDD46 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:15.10.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 7CEC8639-ECF7-4479-B88E-EA3C3D7F6A0A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages. (string)

}

1 : { »

lang : es (string)

value : Mahara, en versiones 15.04 anteriores a la 15.04.8, versiones 15.10 anteriores a la 15.10.4 y versiones 16.04 anteriores a la 16.04.2, es vulnerable a que, en algunas circunstancias, un usuario provoque que se incluyan los artefactos de otro usuario en una exportación Leap2a de sus propias páginas. (string)

}

]

id : CVE-2017-1000133 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-11-03T18:29:00.277 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Third Party Advisory (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1234615 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Third Party Advisory (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1234615 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-200 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object