CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. See the original NVD description below for full technical details.
CVE
CVE-2021-43264
Severity
LOW
CVSS
3.3
EPSS
0.54%
Original NVD Description
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character.
Related CVEs
Other vulnerabilities affecting the same vendor(s)