Packagist/solidinvoice/solidinvoice: high
SolidInvoice: IDOR in LiveComponent allows same-company cross-user access to API tokens and notification transport settings
Action: Upgrade solidinvoice/solidinvoice to 2.3.16 or later.
composer require solidinvoice/solidinvoice:2.3.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.16 | - |
Fixed versions
| 2.3.16 |
Sources
- osv: GHSA-7vfx-4246-jcfh
- https://github.com/SolidInvoice/SolidInvoice/security/advisories/GHSA-7vfx-4246-jcfh
- https://github.com/SolidInvoice/SolidInvoice
published · modified · JSON