2017-11-03 18:00:00
mitre
PUBLISHED
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Maharas built-in login form, still allowing users to log in even if their institution was expired or suspended.