Packagist/open-web-analytics/open-web-analytics CVE-2022-24637: critical 9.8, EPSS 99.06%

Improper Privilege Management in Open Web Analytics

Action: Upgrade open-web-analytics/open-web-analytics to 1.7.4 or later.

composer require open-web-analytics/open-web-analytics:1.7.4

Affected

Fixed versions

Sources

• osv: GHSA-pr9q-v585-qv2w
• https://nvd.nist.gov/vuln/detail/CVE-2022-24637
• https://devel0pment.de/?p=2494
• https://github.com/Open-Web-Analytics/Open-Web-Analytics
• https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.7.4
• http://packetstormsecurity.com/files/169811/Open-Web-Analytics-1.7.3-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/171389/Open-Web-Analytics-1.7.3-Remote-Code-Execution.html

CVE-2022-24637 · published 2022-03-19T00:01:00Z · modified 2023-11-08T04:08:32.286830Z · JSON