Packagist/ibexa/user: medium 5.4
Ibexa User Settings are accessible on the front-end for anonymous user
Action: Upgrade ibexa/user to 4.4.3 or later.
composer require ibexa/user:4.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.4.3 | - |
Fixed versions
| 4.4.3 |
Sources
- osv: GHSA-r3fg-3r88-6x3f
- https://github.com/ibexa/user/security/advisories/GHSA-r3fg-3r88-6x3f
- https://github.com/ibexa/user/commit/77d1a0926d93ca85aa6faeea66bee55e0e067551
- https://developers.ibexa.co/security-advisories/ibexa-sa-2023-002-user-settings-are-accessible-on-the-front-end-for-the-anonymous-user
- https://github.com/ibexa/user
published · modified · JSON