High
Security advisory
Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose access to the group files they uploaded if another group member changes the access permissions on them.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-1000134
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:36 UTC · Revision 1
Source evidence
Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose access to the group files they uploaded if another group member changes the access permissions on them.
osv:CVE-2017-1000134
Complete source record
{
"id": "982abf608e12b8040f1ac6c617ad3da73715ffb0c86ab59c8cfe42a9f6bbd3ee",
"url": "https://osv.dev/vulnerability/CVE-2017-1000134",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-1000134",
"summary": "Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose access to the group files they uploaded if another group member changes the access permissions on them.",
"evidence": "osv:CVE-2017-1000134",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-1000134",
"aliases": [
"CVE-2017-1000134"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/maharaproject/mahara",
"type": "GIT",
"events": [
{
"introduced": "c97ba68462a8fad83036d1b896a1e412729604ee"
},
{
"last_affected": "39ac3f76ea3981e204aca4f25a6d60bd988094f0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8-rc1"
},
{
"last_affected": "1.8-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8-rc2"
},
{
"last_affected": "1.8-rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.0"
},
{
"last_affected": "1.8.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.1"
},
{
"last_affected": "1.8.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.2"
},
{
"last_affected": "1.8.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.3"
},
{
"last_affected": "1.8.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.4"
},
{
"last_affected": "1.8.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.5"
},
{
"last_affected": "1.8.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9-rc1"
},
{
"last_affected": "1.9-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.0"
},
{
"last_affected": "1.9.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.1"
},
{
"last_affected": "1.9.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.2"
},
{
"last_affected": "1.9.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.3"
},
{
"last_affected": "1.9.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10-rc1"
},
{
"last_affected": "1.10-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.0"
},
{
"last_affected": "1.10.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04-rc1"
},
{
"last_affected": "15.04-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "15.04-rc2"
},
{
"last_affected": "15.04-rc2"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.10-rc1",
"1.10.0",
"1.8-rc1",
"1.8-rc2",
"1.8.0",
"1.8.1",
"1.8.2",
"1.8.3",
"1.8.4",
"1.8.5",
"1.9-rc1",
"1.9.0",
"1.9.1",
"1.9.2",
"1.9.3",
"15.04-rc1",
"15.04-rc2",
"15.04RC2_RELEASE",
"15.04RC1_RELEASE",
"1.8RC2_RELEASE",
"1.8RC1_RELEASE"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000134.json"
}
}
],
"modified": "2026-10-24T10:30:41.930993337Z",
"provider": "osv",
"references": [
"https://bugs.launchpad.net/mahara/+bug/1267686"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2017-1000134",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 435240,
"published_at": "2017-11-03T18:29:00.307+00:00"
}