CVE-2013-4432: Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folde...

Security readout for executives and security teams

Mahara had an access-control flaw that could let logged-in users read folders they should no longer access. This is mainly a confidentiality issue for organizations using affected Mahara versions to store learner, staff, or group files. Exposure is likely limited to Mahara installations on affected versions, especially environments with many authenticated users, groups, or shared file areas. Internet exposure raises concern only where untrusted or low-privilege users can authenticate. Treat this as a moderate-priority confidentiality issue. Prioritize remediation where Mahara stores sensitive documents or permits broad user registration. There is no source-backed evidence of active exploitation in the provided bundle. Mitigation focus: Upgrade Mahara to 1.5.13, 1.6.8, 1.7.4, or a later supported release.; Check Mahara vendor guidance for branch-specific upgrade and configuration instructions.; Review folder and group permissions after upgrading..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.