CVE-2017-1000150

8.8 highEPSS 0.8%

High (8.8) in mahara mahara. EPSS 0.8% chance of exploitation in the next 30 days.

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-384
Published: 2017-11-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mahara:mahara

References

https://bugs.launchpad.net/mahara/+bug/1567784
https://bugs.launchpad.net/mahara/+bug/1567784

Check your stack JSON