CVE-2021-43266

high

Description

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution

References

https://mahara.org/interaction/forum/topic.php?id=8995

https://mahara.org/interaction/forum/topic.php?id=8952

https://bugs.launchpad.net/mahara/+bug/1949527

https://bugs.launchpad.net/mahara/+bug/1942903

Details

Source: Mitre, NVD

Published: 2021-11-02

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:N/AC:H/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.3

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00648