{"id":"CVE-2022-24111","details":"In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.","modified":"2026-08-12T03:51:10.029834930Z","published":"2022-02-10T16:01:03Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24111.json","unresolved_ranges":[{"extracted_events":[{"introduced":"21.04"},{"fixed":"21.04.3"},{"introduced":"21.10"},{"fixed":"21.10.1"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://bugs.launchpad.net/mahara/+bug/1959146"},{"type":"WEB","url":"https://mahara.org/interaction/forum/topic.php?id=8996"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24111.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24111"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/maharaproject/mahara","events":[{"introduced":"359597b32c7afe52339422a91f14256e17b33dfc"},{"fixed":"52109b30a7a9fa34ccd79bffe1ec42df3e9d3cc7"},{"introduced":"9b0da78a1f8585b142a372d422bf5d9a36e1450d"},{"last_affected":"9b0da78a1f8585b142a372d422bf5d9a36e1450d"}],"database_specific":{"cpe":["cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:21.10.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"21.04.0"},{"fixed":"21.04.3"},{"introduced":"21.10.0"},{"last_affected":"21.10.0"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["21.10.0","21.04.2_RELEASE","21.10.0_RELEASE","21.04.1_RELEASE","21.04.0_RELEASE"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24111.json"}}],"schema_version":"1.9.0"}