CVE-2011-1403

Mahara < 1.3.6 - Cross-Site Request Forgery via Pieforms Session Key Regeneration

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys.

References (6)

Core 6
Core References
Patch x_refsource_confirm
https://launchpad.net/mahara/+bug/771598
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67398
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47798
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44433
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2246

Scores

EPSS 0.0103
EPSS Percentile 59.8%

Details

CWE
CWE-352
Status published
Products (33)
mahara/mahara 0.9.0
mahara/mahara 0.9.1
mahara/mahara 0.9.2
mahara/mahara 1.0.0
mahara/mahara 1.0.1
mahara/mahara 1.0.2
mahara/mahara 1.0.3
mahara/mahara 1.0.4
mahara/mahara 1.0.5
mahara/mahara 1.0.6
... and 23 more
Published May 13, 2011
Tracked Since Feb 18, 2026