CVE-2023-22489
1 advisory.
Packagist/flarum/core CVE-2023-22489: low 3.5, EPSS 0.56%
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
Action: Upgrade flarum/core to 1.6.3 or later.
composer require flarum/core:1.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.0 | 1.6.3 | - |
Fixed versions
| 1.6.3 |
Sources
- osv: GHSA-hph3-hv3c-7725
- https://github.com/flarum/framework/security/advisories/GHSA-hph3-hv3c-7725
- https://nvd.nist.gov/vuln/detail/CVE-2023-22489
- https://github.com/flarum/framework/commit/12f14112a0ecd1484d97330b82beb2a145919015
- https://github.com/flarum/framework
- https://github.com/flarum/framework/releases/tag/v1.6.3
CVE-2023-22489 · published · modified · JSON