CVE-2025-29992

7.5 highEPSS 0.3%

High (7.5) in mahara mahara. EPSS 0.3% chance of exploitation in the next 30 days.

Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2025-08-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mahara:mahara

References

https://mahara.org/THE-FINAL-URL-IN-QUESTION
https://mahara.org/interaction/forum/topic.php?id=9711

Check your stack JSON