CVE-2017-14163

An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account.

• CWE-384

• https://bugs.launchpad.net/mahara/+bug/1701978Issue Tracking, Patch, Third Party Advisory
• https://bugs.launchpad.net/mahara/+bug/1701978Issue Tracking, Patch, Third Party Advisory

Published

Oct 31, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14152A mishandled zero case was discovered in opj_j2k_set_cinema_…8.8
• CVE-2017-14153This vulnerability allows local attackers to escalate privil…
• CVE-2017-14156The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_ba…
• CVE-2017-14158Scrapy 1.4 allows remote attackers to cause a denial of serv…
• CVE-2017-14159slapd in OpenLDAP 2.4.45 and earlier creates a PID file afte…4.7
• CVE-2017-14160The bark_noise_hybridmp function in psy.c in Xiph.Org libvor…8.8
• CVE-2017-14164A size-validation issue was discovered in opj_j2k_write_sot …8.8
• CVE-2017-14165The ReadSUNImage function in coders/sun.c in GraphicsMagick …
• CVE-2017-14166libarchive 3.3.2 allows remote attackers to cause a denial o…
• CVE-2017-14167Integer overflow in the load_multiboot function in hw/i386/m…8.8
• CVE-2017-14169In the mxf_read_primer_pack function in libavformat/mxfdec.c…
• CVE-2017-14170In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf…