CVE-2017-1000157

Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on.

• CWE-200

• https://bugs.launchpad.net/mahara/+bug/1692749Exploit, Issue Tracking, Patch, Third Party Advisory
• https://bugs.launchpad.net/mahara/+bug/1692749Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Nov 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000151Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.…
• CVE-2017-1000152Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running…
• CVE-2017-1000153Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16…
• CVE-2017-1000154Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.…
• CVE-2017-1000155Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.…
• CVE-2017-1000156Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.…
• CVE-2017-1000158CPython (aka Python) up to 2.7.13 is vulnerable to an intege…9.8
• CVE-2017-1000159Command injection in evince via filename when printing to PD…
• CVE-2017-1000160EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site …
• CVE-2017-1000161Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000162Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000163The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 th…