Packagist/bytefury/crater CVE-2022-0203: medium 5.3, EPSS 1.21%

Missing Authorization in Crater Invoice

Action: Upgrade bytefury/crater to 6.0.2 or later.

composer require bytefury/crater:6.0.2

Affected

Fixed versions

Sources

• osv: GHSA-xh9g-cp3v-p8q4
• https://nvd.nist.gov/vuln/detail/CVE-2022-0203
• https://github.com/crater-invoice/crater/commit/dd324c8bb6b17009f82afe8bc830caec7241e992
• https://github.com/crater-invoice/crater
• https://huntr.dev/bounties/395fc553-2b90-4e69-ba07-a316e1c06406

CVE-2022-0203 · published 2022-01-27T00:01:17Z · modified 2023-11-08T04:07:29.779352Z · JSON