Medium
Security advisory
Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-1000145
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 08:23 UTC · Revision 1
Source evidence
Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.
osv:CVE-2017-1000145
Complete source record
{
"id": "a36ff947054954fe6c3beb7578d4e7ee9d3f2c9a2f451278e9cba8fb14047553",
"url": "https://osv.dev/vulnerability/CVE-2017-1000145",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-1000145",
"summary": "Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.",
"evidence": "osv:CVE-2017-1000145",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2017-1000145",
"aliases": [
"CVE-2017-1000145"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/maharaproject/mahara",
"type": "GIT",
"events": [
{
"introduced": "91a483f6f5f2b9fb09bc33c4c98cea66581587cc"
},
{
"last_affected": "71a160b12bcde1bd3569377c8e010436228aaf5f"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9-rc1"
},
{
"last_affected": "1.9-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.0"
},
{
"last_affected": "1.9.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.1"
},
{
"last_affected": "1.9.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.2"
},
{
"last_affected": "1.9.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.3"
},
{
"last_affected": "1.9.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.4"
},
{
"last_affected": "1.9.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.5"
},
{
"last_affected": "1.9.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.6"
},
{
"last_affected": "1.9.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10-rc1"
},
{
"last_affected": "1.10-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.0"
},
{
"last_affected": "1.10.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.1"
},
{
"last_affected": "1.10.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.2"
},
{
"last_affected": "1.10.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.3"
},
{
"last_affected": "1.10.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.4"
},
{
"last_affected": "1.10.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04-rc1"
},
{
"last_affected": "15.04-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04-rc2"
},
{
"last_affected": "15.04-rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04.0"
},
{
"last_affected": "15.04.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04.1"
},
{
"last_affected": "15.04.1"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.10-rc1",
"1.10.0",
"1.10.1",
"1.10.2",
"1.10.3",
"1.10.4",
"1.9-rc1",
"1.9.0",
"1.9.1",
"1.9.2",
"1.9.3",
"1.9.4",
"1.9.5",
"1.9.6",
"15.04-rc1",
"15.04-rc2",
"15.04.0",
"15.04.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000145.json"
}
}
],
"modified": "2026-10-24T10:31:06.822025573Z",
"provider": "osv",
"references": [
"https://bugs.launchpad.net/mahara/+bug/1460368"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2017-1000145",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 441068,
"published_at": "2017-11-03T18:29:00.713+00:00"
}