CVE-2011-1403 Cross-site request forgery in n/a
Remote attackers can hijack user authentication via CSRF in Mahara forms, potentially taking over accounts.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2011-1403?
CVE-2011-1403 is a medium-severity vulnerability in Mahara Mahara, published on 13 May 2011. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys.
Weakness: CWE-352
Which versions are affected by CVE-2011-1403?
It affects 1 product.
Products include Mahara Mahara.
How do I fix CVE-2011-1403?
Upgrade to a fixed version.
Is CVE-2011-1403 being exploited?
There is no known exploitation of CVE-2011-1403 in the wild and no public exploit code.
Other vulnerabilities in Mahara Mahara
Sources
Also known as GHSA-ggc4-2r54-5p25.