Vulnerability Details : CVE-2018-6182
Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of POST data containing bad content with which to hit the server.
Vulnerability category: Cross site scripting (XSS)
Products affected by CVE-2018-6182
- cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-6182
0.28%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 49 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-6182
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST | |
|
6.1
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
2.8
|
2.7
|
NIST |
CWE ids for CVE-2018-6182
-
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-6182
-
https://mahara.org/interaction/forum/topic.php?id=8215
Security Announcements - Security issue relating to cross-site scripting <16.10.9; <17.04.7; <17.10.4 - Mahara ePortfolio SystemVendor Advisory
-
https://bugs.launchpad.net/mahara/+bug/1744789
Bug #1744789 “Avoid relying on TinyMCE code stripping alone” : Bugs : MaharaIssue Tracking;Third Party Advisory
Jump to