Headline
CVE-2022-33913: Mahara ePortfolio System
In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission check.
Mahara: Invalid Parameter
A required parameter is missing or malformed
The ‘id’ parameter is not an integer