{"id":"CVE-2022-44544","details":"Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger a remote shell if the site is running on Ubuntu and the flag -dSAFER is not set with Ghostscript.","modified":"2026-08-12T03:51:20.775008866Z","published":"2022-11-06T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/44xxx/CVE-2022-44544.json","unresolved_ranges":[{"extracted_events":[{"introduced":"21.04"},{"fixed":"21.04.7"},{"introduced":"21.10"},{"fixed":"21.10.5"},{"introduced":"22.04"},{"fixed":"22.04.3"},{"introduced":"22.10"},{"fixed":"22.10.0"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://bugs.launchpad.net/mahara/+bug/1979575"},{"type":"WEB","url":"https://mahara.org/interaction/forum/topic.php?id=9198"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/44xxx/CVE-2022-44544.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44544"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/maharaproject/mahara","events":[{"introduced":"359597b32c7afe52339422a91f14256e17b33dfc"},{"fixed":"a565484c674358c4991d37d263565f4e96ed19f5"},{"introduced":"9b0da78a1f8585b142a372d422bf5d9a36e1450d"},{"fixed":"651004442934136c32cadc4a4658405a7e24a865"},{"introduced":"9502dd8e97405dec1b1c5f22ac3e516504f910e5"},{"fixed":"bb4b41aba3d2a910ea354492dfb95cba3f398642"}],"database_specific":{"extracted_events":[{"introduced":"21.04.0"},{"fixed":"21.04.7"},{"introduced":"21.10.0"},{"fixed":"21.10.5"},{"introduced":"22.04.0"},{"fixed":"22.04.3"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*"}}],"versions":["22.04.2_RELEASE","21.04.6_RELEASE","21.10.4_RELEASE","21.10.3_RELEASE","21.04.5_RELEASE","22.04.1_RELEASE","21.04.4_RELEASE","22.04.0_RELEASE","21.10.2_RELEASE","21.10.1_RELEASE","21.04.3_RELEASE","21.04.2_RELEASE","21.10.0_RELEASE","21.04.1_RELEASE","21.04.0_RELEASE"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-44544.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}