Mahara Information Disclosure Vulnerability in Group Administration Submissions Page

A vulnerability exists in Mahara versions 24.04 prior to 24.04.1 and 23.04 prior to 23.04.6, allowing certain information to be disclosed to institution administrators. This occurs under specific conditions when accessing the 'Current submissions' page within the group administration section.

Impact

This vulnerability could lead to unauthorized information disclosure to institution administrators.

Remediation

Users can update to Mahara versions 24.04.1, 23.04.6, or 22.10.6. Instructions for downloading these versions are available on the Mahara Releases page.