CVE-2020-9387 in Mahara

Sumário

de VulDB • 08/06/2026

In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 25/02/2020
• Moderação: aceite
• Entrada: VDB-154681
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 4.3 (NVD)
• EPSS: 0.00724
• KEV: não
• Atividades: muito baixo
• Sector: Agriculture, Lawfirm, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-9387
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-9387
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-9387/