CVE-2024-23649
1 advisory.
crates.io/lemmy_server CVE-2024-23649: high 7.5, EPSS 0.51%
Any authenticated user may obtain private message details from other users on the same instance
Action: Upgrade lemmy_server to 0.19.1 or later.
cargo update -p lemmy_server --precise 0.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.17.0 | 0.19.1 | - |
Fixed versions
| 0.19.1 |
Sources
- osv: GHSA-r64r-5h43-26qv
- https://github.com/LemmyNet/lemmy/security/advisories/GHSA-r64r-5h43-26qv
- https://nvd.nist.gov/vuln/detail/CVE-2024-23649
- https://github.com/LemmyNet/lemmy/commit/bc32b408b523b9b64aa57b8e47748f96cce0dae5
- https://github.com/LemmyNet/lemmy
CVE-2024-23649 · published · modified · JSON