Critical severity9.1NVD Advisory· Published Nov 24, 2012· Updated Apr 29, 2026
CVE-2012-2239
CVE-2012-2239
Description
Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php.
Affected products
2- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- bugs.launchpad.net/mahara/+bug/1047111nvdIssue TrackingPatch
- mahara.org/interaction/forum/topic.phpnvdVendor Advisory
- www.debian.org/security/2012/dsa-2591nvdMailing List
News mentions
0No linked articles in our index yet.