CVE-2024-47853

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability (LTI).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-478546.1An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into aCVE-2024-478555.3util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.CVE-2024-478569.8In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or morCVE-2024-478579.8SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSHCVE-2024-47862.8An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device CVE-2024-478636.2An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, anCVE-2024-478645.3home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote CVE-2024-478655.3Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerabCVE-2024-478667.5Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-sourcCVE-2024-478677.5Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloadeCVE-2024-478687.5Gradio is an open-source Python package designed for quick prototyping. This is a **data validation vulnerability** affecting several GradioCVE-2024-478693.7Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **timing attack** in the way Gradio co
CVE-2024-47853: High severity, CVSS 8.8 | Vulnix