High severity7.5NVD Advisory· Published Apr 28, 2022· Updated Jun 17, 2026
CVE-2022-29585
CVE-2022-29585
Description
In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used. They are all shown from page 2 of the group results list (rather than only being shown for the institution that the viewer is a member of).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*range: <20.10.5
- cpe:2.3:a:mahara:mahara:22.04.0:rc1:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <20.10.5, <21.04.4, <21.10.2, <22.04.0
Patches
Vulnerability mechanics
References
2- bugs.launchpad.net/mahara/+bug/1922226nvdVendor Advisory
- mahara.org/interaction/forum/topic.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.