{"action":"Upgrade ibexa/user to 4.4.3 or later.","affected":[{"fixed":"4.4.3","introduced":"4.0.0"}],"component":"ibexa/user","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.4.3"],"ghsa_id":"GHSA-r3fg-3r88-6x3f","id":"tcs_01M5KF7TMQCVNZ01VKBP3DYGSD","modified_at":"2024-11-30T05:37:23.694583Z","published_at":"2023-05-10T21:25:28Z","references":["https://osv.dev/vulnerability/GHSA-r3fg-3r88-6x3f","https://github.com/ibexa/user/security/advisories/GHSA-r3fg-3r88-6x3f","https://github.com/ibexa/user/commit/77d1a0926d93ca85aa6faeea66bee55e0e067551","https://developers.ibexa.co/security-advisories/ibexa-sa-2023-002-user-settings-are-accessible-on-the-front-end-for-the-anonymous-user","https://github.com/ibexa/user"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-r3fg-3r88-6x3f","url":"https://osv.dev/vulnerability/GHSA-r3fg-3r88-6x3f"}],"summary":"Ibexa User Settings are accessible on the front-end for anonymous user"}