https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T14:13:32.594872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-26209 cnvd-2021-26209 2026-10-20T14:13:32.598641+00:00 cnvd-2021-26209 https://cve.radiocsirt.org/vuln/euvd-2026-26277 EUVD-2026-26277 2026-10-20T14:13:32.598678+00:00 EUVD-2026-26277 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29349 fkie_cve-2021-29349 2026-10-20T14:13:32.598692+00:00

Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieform_delete_all_notifications request, which leads to removing all messages from a mailbox.

 https://cve.radiocsirt.org/vuln/ghsa-qmp2-78hm-526w GHSA-qmp2-78hm-526w 2026-10-20T14:13:32.598720+00:00

Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieform_delete_all_notifications request, which leads to removing all messages from a mailbox.

 https://cve.radiocsirt.org/vuln/gsd-2021-29349 gsd-2021-29349 2026-10-20T14:13:32.598736+00:00 gsd-2021-29349