CVE-2017-1000134

Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose access to the group files they uploaded if another group member changes the access permissions on them.

• CWE-732

• https://bugs.launchpad.net/mahara/+bug/1267686Exploit, Issue Tracking, Patch, Third Party Advisory
• https://bugs.launchpad.net/mahara/+bug/1267686Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Nov 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000127Exiv2 0.26 contains a heap buffer overflow in tiff parser
• CVE-2017-1000128Exiv2 0.26 contains a stack out of bounds read in JPEG2000 p…
• CVE-2017-1000129Serendipity 2.0.3 is vulnerable to a SQL injection in the bl…
• CVE-2017-1000131Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.…
• CVE-2017-1000132Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before…
• CVE-2017-1000133Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.…
• CVE-2017-1000135Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before…
• CVE-2017-1000136Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before…
• CVE-2017-1000137Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulne…
• CVE-2017-1000138Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulne…
• CVE-2017-1000139Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before…
• CVE-2017-1000140Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before…