Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 18 Aug 2026 00:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthorized Recall of Backed-up Content in Mahara Text Block | |
| Weaknesses | CWE-200 |
Mon, 17 Aug 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mahara
Mahara mahara |
|
| Vendors & Products |
Mahara
Mahara mahara |
Mon, 17 Aug 2026 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-17T22:07:24.774Z
Reserved: 2026-04-24T00:00:00.000Z
Link: CVE-2026-42164
No data.
Status : Received
Published: 2026-08-17T23:16:52.123
Modified: 2026-08-17T23:16:52.123
Link: CVE-2026-42164
No data.
OpenCVE Enrichment
Updated: 2026-08-18T00:15:03Z
Weaknesses