CVE-2017-1000147

CVE-2017-1000147 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Mahara versions 1.9.x prior to 1.9.8, 1.10.x prior to 1.10.6, and 15.04.x prior to 15.04.3. This flaw allows an attacker to trick a logged-in Mahara user into unknowingly uploading malicious files through the filebrowser widget. The vulnerability has a CVSSv3 score of 6.8 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.