CVE-2024-56329
1 advisory.
Packagist/joelbutcher/socialstream CVE-2024-56329: high 8.9, EPSS 0.58%
Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
Action: Upgrade joelbutcher/socialstream to 5.6.0 or later.
composer require joelbutcher/socialstream:6.2.0composer require joelbutcher/socialstream:5.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.2.0 | - |
| 0 | 5.6.0 | - |
Fixed versions
| 6.2.0 | 5.6.0 |
Sources
- osv: GHSA-3q97-vjpp-c8rp
- nvd: CVE-2024-56329
- https://github.com/joelbutcher/socialstream/security/advisories/GHSA-3q97-vjpp-c8rp
- https://github.com/joelbutcher/socialstream/commit/ae4dc3906f54fa792b296036d7b3dcea9a4d259b
- https://github.com/joelbutcher/socialstream
CVE-2024-56329 · published · modified · JSON