Description
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.
Unscored
CVE-2022-28892
EUVD-2022-33327GHSA-9v26-vwmp-p2jp
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens a…
Published Apr 28, 2022 · Updated Aug 3, 2024 · Assigned by mitre