Description
Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| sakaiproject | sakai | >= 23.0, < 23.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.sakaiproject.kernel:sakai-kernel-impl | >= 23.0, < 23.3 | 23.3 | GHSA-cx95-q6gx-w4qp |