CVE-2019-11514
1 advisory.
Packagist/flarum/flarum CVE-2019-11514: high 7.5
Flarum mishandles invalidation of user email tokens
Action: Upgrade flarum/flarum to 0.1.0-beta.8 or later.
composer require flarum/flarum:0.1.0-beta.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.0-beta.8 | - |
Fixed versions
| 0.1.0-beta.8 |
Sources
- osv: GHSA-g6w5-439m-jhwv
- https://nvd.nist.gov/vuln/detail/CVE-2019-11514
- https://github.com/flarum/core/commit/66607a56749339d50620b049701ad4d6a4dafbd7
- https://discuss.flarum.org/d/17745-flarum-0-1-0-beta-8-released
CVE-2019-11514 · published · modified · JSON