High severity8.8NVD Advisory· Published Apr 28, 2022· Updated Jun 17, 2026
CVE-2022-28892
CVE-2022-28892
Description
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*range: <20.10.5
- cpe:2.3:a:mahara:mahara:22.04.0:rc1:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <20.10.5, <21.04.4, <21.10.2, <22.04.0
Patches
Vulnerability mechanics
References
2- bugs.launchpad.net/mahara/+bug/1930171nvdIssue TrackingPatchVendor Advisory
- mahara.org/interaction/forum/topic.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.