In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the βEdit accessβ screen when sharing portfolios.
https://mahara.org/interaction/forum/topic.php?id=8590
https://bugs.launchpad.net/mahara/+bug/1863043
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9282