CVE-2023-22487
1 advisory.
Packagist/flarum/mentions CVE-2023-22487: high 7.7, EPSS 0.69%
Flarum post mentions can be used to read any post on the forum without access control
Action: Upgrade flarum/mentions to 1.6.3 or later.
composer require flarum/mentions:1.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.3 | - |
Fixed versions
| 1.6.3 |
Sources
- osv: GHSA-22m9-m3ww-53h3
- https://github.com/flarum/framework/security/advisories/GHSA-22m9-m3ww-53h3
- https://nvd.nist.gov/vuln/detail/CVE-2023-22487
- https://github.com/flarum/framework/commit/ab1c868b978e8b0d09a5d682c54665dae17d0985
- https://github.com/flarum/framework
- https://github.com/flarum/framework/releases/tag/v1.6.3
CVE-2023-22487 · published · modified · JSON