CVE-2025-29992: Mahara · Information Exposure
Source CVE Database V5
Not known to be exploited · CVSS 7.5 High · fixed in 24.04.9 : patch affected systems soon.
Data as of 26 Oct 2026, 11:07 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 25% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 24.04.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 26 Aug 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Organizations should prioritize upgrading Mahara installations to version 24.04.9 or later, where this vulnerability is addressed. Until upgrades are applied, administrators should implement strict network segmentation to restrict database server access only to trusted hosts and services, minimizing exposure if connection details are leaked. Additionally, database credentials should be rotated regularly, and strong authentication mechanisms enforced on database servers to reduce the risk of unauthorized access. Monitoring and alerting for unusual database access patterns can help detect exploitation attempts early. Application-level error handling should be reviewed and customized to avoid detailed error disclosures, replacing them with generic messages. Employing Web Application Firewalls (WAFs) to detect and block suspicious requests targeting error conditions can provide an additional layer of defense. Finally, organizations should conduct security awareness training for IT staff to recognize and respond to such vulnerabilities promptly.
Description
Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.