{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04-rc1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04-rc2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.5"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.6"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.7"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.8"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.04.9"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "16.04-rc1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "16.04-rc2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "16.04.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "16.04.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "16.04.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "16.04.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.10.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.10.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.10.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.10.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.10.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "15.10.5"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "48a238a2f76a7ea322580fe93b7c026becd9acce"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "39ac3f76ea3981e204aca4f25a6d60bd988094f0"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9b217d5c0da7118a8c9d668794a3869d85276534"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "71a160b12bcde1bd3569377c8e010436228aaf5f"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "3b3d3e3cd03d1663da0b0e3826fcdff13f488886"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "44ebd0f0993352955f7971920fa8ca231e6a8bb9"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "d527a5edeb6087fd94956e1e3e18bcf4a432540d"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "53ee40015a2363a6c5c3d3cccc3fb35e27a7abb0"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "eea43577f7952fcfef7cbaf61b87cce1bdcdb8dd"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "8f8c729b91c4db1b11a43ed9248385702608e6db"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "734d408f59db38b464f616fbfb377fcddf522d4a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "80673cb4210bef8ec2592cd1bd6e59192373d66b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c4f30a389c34a2177a7f2aa60a69b2494c5f08fa"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "131e345b6847f10cb4a59ca4c748224d8bbe3cab"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "6151bb5fea5811277d051a81865b946d76a92fba"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "bc9308e5d855dc04dc81990c2901b6e0b6e98102"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c3601dde87abf89382c8b3ac74d500b5e636560a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "850a663a5e911e819a8216a9405d84ea3cf3cdab"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "b5fe2b35e1a12171feeb6a9d15e9308ea5787fe1"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "2c77126e11080109b24fb7068b57f236ee9d3a2d"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "3c718e63ed2b6d3d351d38d94c7008ee880ad655"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "1c2f89f8ee9dd8dba44594e8d50a4d47380eec9e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "378d03e92c3cda58935d895ce7dd9a7d0f0a4a1b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7555fd2d8dc30bbf3c0ed6a95f4b9a045500c0dc"
            }
          ],
          "repo": "https://github.com/maharaproject/mahara",
          "type": "GIT"
        }
      ]
    }
  ],
  "details": "Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email can be used to gain access to the user's account.",
  "id": "CVE-2017-1000153",
  "modified": "2026-03-13T21:53:56.859827790Z",
  "published": "2017-11-03T18:29:01.027Z",
  "references": [
    {
      "type": "FIX",
      "url": "https://bugs.launchpad.net/mahara/+bug/1577251"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}