Medium
Security advisory
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-1000143
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:42 UTC · Revision 1
Source evidence
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore.
osv:CVE-2017-1000143
Complete source record
{
"id": "117ef8ab4cc12ff47406a7da34c28a5ba41c238df5eb179a1328388953643951",
"url": "https://osv.dev/vulnerability/CVE-2017-1000143",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-1000143",
"summary": "Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore.",
"evidence": "osv:CVE-2017-1000143",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2017-1000143",
"aliases": [
"CVE-2017-1000143"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/maharaproject/mahara",
"type": "GIT",
"events": [
{
"introduced": "c97ba68462a8fad83036d1b896a1e412729604ee"
},
{
"last_affected": "39ac3f76ea3981e204aca4f25a6d60bd988094f0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8-rc1"
},
{
"last_affected": "1.8-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8-rc2"
},
{
"last_affected": "1.8-rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.0"
},
{
"last_affected": "1.8.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.1"
},
{
"last_affected": "1.8.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.2"
},
{
"last_affected": "1.8.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.3"
},
{
"last_affected": "1.8.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.4"
},
{
"last_affected": "1.8.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.5"
},
{
"last_affected": "1.8.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.6"
},
{
"last_affected": "1.8.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9-rc1"
},
{
"last_affected": "1.9-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.0"
},
{
"last_affected": "1.9.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.1"
},
{
"last_affected": "1.9.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.2"
},
{
"last_affected": "1.9.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.3"
},
{
"last_affected": "1.9.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.4"
},
{
"last_affected": "1.9.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10-rc1"
},
{
"last_affected": "1.10-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.0"
},
{
"last_affected": "1.10.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.1"
},
{
"last_affected": "1.10.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.2"
},
{
"last_affected": "1.10.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04-rc1"
},
{
"last_affected": "15.04-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04-rc2"
},
{
"last_affected": "15.04-rc2"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.10-rc1",
"1.10.0",
"1.10.1",
"1.10.2",
"1.8-rc1",
"1.8-rc2",
"1.8.0",
"1.8.1",
"1.8.2",
"1.8.3",
"1.8.4",
"1.8.5",
"1.8.6",
"1.9-rc1",
"1.9.0",
"1.9.1",
"1.9.2",
"1.9.3",
"1.9.4",
"15.04-rc1",
"15.04-rc2",
"15.04RC2_RELEASE",
"15.04RC1_RELEASE",
"1.8RC2_RELEASE",
"1.8RC1_RELEASE"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000143.json"
}
}
],
"modified": "2026-10-24T10:30:43.407892596Z",
"provider": "osv",
"references": [
"https://bugs.launchpad.net/mahara/+bug/1429647"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2017-1000143",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 435613,
"published_at": "2017-11-03T18:29:00.653+00:00"
}