---
cve: "CVE-2022-28892"
severity: "LOW"
cvss: 3.1
epss: "45%"
vendor: "n/a"
kev: false
exploited: false
published: "2022-04-28 16:15:08"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-05T17:06:51+02:00"
---

# CVE-2022-28892

> 3.1 LOW

## Beschreibung

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.

## Patch verfügbar (OSV)

- 5e19936332bcbbaf29d6fb5709182076840a83ee (Commit)
- 3785940dbcd2bbdce534dcff7abdc2dd73c1b9ed (Commit)

## Referenzen

- <https://bugs.launchpad.net/mahara/+bug/1930171>
- <https://mahara.org/interaction/forum/topic.php?id=9094>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2022-28892) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_