CVE-2011-4118: Mahara

Medium severity, CVSS 6.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Mahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote authenticated users to gain privileges via a jump to an XMLRPC target.

Affected products

• Mahara Mahara: up to and including 1.4.0; version 0.9.0 only; version 0.9.1 only; version 0.9.2 only; version 1.0.0 only; version 1.0.1 only; …

Published 2011-11-15. Last modified 2026-06-16.