Vulnerabilities > CVE-2022-24694 - Files or Directories Accessible to External Parties vulnerability in Mahara
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents are affected.)
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 14 |