CVE-2013-4429: Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artef...

Security readout for executives and security teams

Mahara had an access-control flaw that let a logged-in remote user read artefacts they should not be allowed to see. The issue affected Mahara releases before 1.5.12, 1.6.7, and 1.7.3. The business concern is unauthorized exposure of user content inside affected Mahara sites. Exposure is most likely for organizations still running Mahara before 1.5.12, 1.6.7, or 1.7.3, especially where untrusted or broad user populations can create journals or edit blocks. Treat this as a moderate-priority data exposure issue. Patch affected Mahara systems, then assess whether sensitive user artefacts could have been viewed by authenticated users before remediation. Mitigation focus: Upgrade affected Mahara branches to 1.5.12, 1.6.7, 1.7.3, or later.; Check Mahara vendor guidance for branch-specific security update instructions.; Limit account creation and privileges until affected systems are upgraded..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.