CVE-2017-1000141

CVE-2017-1000141 describes a vulnerability in Mahara versions prior to 18.10.0 where the application improperly handled user requests related to account management. This flaw could prevent users from changing their username, primary email, or deleting their account, as it failed to prompt for a password or send a warning email as expected. Rated as medium severity (CVSS 6.5), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to low integrity and availability impacts for affected user accounts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.