Description
Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions.
References
mahara.org/interaction/forum/view.php?id=43
mahara.org/interaction/forum/topic.php?id=9519
