Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import. A particularly structured XML file could cause code execution when being processed.
History

Sat, 23 Aug 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Mahara
Mahara mahara
Vendors & Products Mahara
Mahara mahara

Fri, 22 Aug 2025 19:15:00 +0000

Type Values Removed Values Added
Description Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import. A particularly structured XML file could cause code execution when being processed.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-08-22T19:13:13.865Z

Reserved: 2022-11-10T00:00:00.000Z

Link: CVE-2022-45134

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-08-22T19:15:37.997

Modified: 2025-08-22T19:15:37.997

Link: CVE-2022-45134

cve-icon Redhat

No data.