CVE-2022-45133

6.5 mediumEPSS 0.3%

Medium (6.5) in mahara mahara. EPSS 0.3% chance of exploitation in the next 30 days.

Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XML file could allow one to traverse the server to obtain access to secure files or cause code execution based on the payload.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-26
Published: 2025-08-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mahara:mahara

References

https://bugs.launchpad.net/mahara/+bug/1995819
https://mahara.org/interaction/forum/topic.php?id=9353

Check your stack JSON