Packagist/thorsten/phpmyfaq CVE-2023-5866: medium 6.3, EPSS 0.29%
Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq
Action: Upgrade thorsten/phpmyfaq to 3.2.1 or later.
composer require thorsten/phpmyfaq:3.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.1 | - |
Fixed versions
| 3.2.1 |
Sources
- osv: GHSA-34w4-wrqp-j47g
- https://nvd.nist.gov/vuln/detail/CVE-2023-5866
- https://github.com/thorsten/phpmyfaq/commit/fdacff14acd5e69841068f0e32b59e2d1b1d0d55
- https://github.com/thorsten/phpMyFAQ
- https://huntr.com/bounties/ec44bcba-ae7f-497a-851e-8165ecf56945
CVE-2023-5866 · published · modified · JSON