PT-2021-18176 · Mahara · Mahara

0Xbaz · Published 2021-03-31 · Updated 2021-05-14 · CVE-2021-29349

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Mahara version 20.10

Description: The issue allows a remote attacker to remove inbox-mail on the server due to a Cross Site Request Forgery (CSRF) vulnerability. The application fails to validate the CSRF token for a POST request. An attacker can craft a "module/multirecipientnotification/inbox.php pieform delete all notifications" request, which leads to removing all messages from a mailbox.

Recommendations: For Mahara version 20.10, as a temporary workaround, consider disabling the pieform delete all notifications function in the module/multirecipientnotification/inbox.php endpoint until a patch is available. Restrict access to the inbox.php module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-29349

Affected Products

Mahara

References · 7

• 🔥 https://github.com/Vulnmachines/CVE-2021-29349 · Exploit
• 🔥 https://github.com/0xBaz/CVE-2021-29349/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-29349 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29349 · Vendor Advisory
• https://t.me/ckure/7930 · Telegram Post
• https://t.me/cvenotify/12814 · Telegram Post
• https://t.me/cybersecuritytechnologies/3152 · Telegram Post