thorsten/phpmyfaq · Security
thorsten/phpmyfaq vulnerable to authentication bypass
- GHSA ID
- GHSA-4cr4-x82x-hwm9
- CVE ID
- CVE-2023-1886
- Severity
- high
- Published
- Updated
- CVSS
- 7.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS v3
- 7.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
thorsten/phpmyfaq prior to 3.1.12 is vulnerable to authentication bypass by capture-relay that allows unlimited comments to be sent. This has been fixed in 3.1.12.
CWEs
- CWE-294 · Authentication Bypass by Capture-replay