{"id":"CVE-2018-11565","details":"Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information.","modified":"2026-04-10T04:04:34.800652Z","published":"2018-05-30T21:29:00.690Z","references":[{"type":"ADVISORY","url":"https://mahara.org/interaction/forum/topic.php?id=8271"},{"type":"FIX","url":"https://bugs.launchpad.net/mahara/+bug/1772774"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/maharaproject/mahara","events":[{"introduced":"c1b8e4e448228b12a674c205a7288389613271e7"},{"fixed":"4731adeec17713177b730a94b9191c0725339da2"},{"introduced":"7e3e132425fc023eb85e66717284540d80bdacd1"},{"fixed":"101db724b6cdbbb6ab5c4f8dfe45274e0f437a21"},{"introduced":"0"},{"last_affected":"2a17a9a771a9016f78bcf62b9150ca6283dc449b"}],"database_specific":{"versions":[{"introduced":"17.04.0"},{"fixed":"17.04.8"},{"introduced":"17.10.0"},{"fixed":"17.10.5"},{"introduced":"0"},{"last_affected":"18.04.0"}]}}],"versions":["1.0.0ALPHA1_RELEASE","1.0.0ALPHA2_RELEASE","1.0.0BETA2_RELEASE","1.1.0ALPHA1_RELEASE","1.1.0ALPHA2_RELEASE","1.1.0ALPHA3_RELEASE","1.1.0BETA2_RELEASE","1.1.0BETA4_RELEASE","1.2.0ALPHA2_RELEASE","1.2.0ALPHA3_RELEASE","1.3.0BETA1_RELEASE","1.3.0BETA2_RELEASE","1.4.0ALPHA1_RELEASE","1.7RC1_RELEASE","1.8RC1_RELEASE","1.8RC2_RELEASE","17.04.0_RELEASE","17.04.1_RELEASE","17.04.2_RELEASE","17.04.3_RELEASE","17.04.4_RELEASE","17.04.5_RELEASE","17.04.6_RELEASE","17.04.7_RELEASE","17.10.0_RELEASE","17.10.1_RELEASE","17.10.2_RELEASE","17.10.3_RELEASE","17.10.4_RELEASE","18.04.0_RELEASE","18.04RC1_RELEASE","18.04RC2_RELEASE"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11565.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}