Medium severity4.3NVD Advisory· Published Apr 30, 2020· Updated Jun 17, 2026
CVE-2020-9387
CVE-2020-9387
Description
In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*range: >=19.04,<19.04.5
- cpe:2.3:a:mahara:mahara:20.04:rc1:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:20.04:rc2:*:*:*:*:*:*
- (no CPE)range: <19.04.5, <19.10.3
- Mahara/Maharadescription
Patches
Vulnerability mechanics
References
2- bugs.launchpad.net/mahara/+bug/1836984nvdIssue TrackingPatchThird Party Advisory
- mahara.org/interaction/forum/topic.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.