GitHub Advisoryadvisory · Packagist

GHSA-p6m5-x83r-hqmr Flarum Core Leaks PII

MEDIUM Published 2022-05-14 Modified 2023-07-24 Official page ↗

Aliases: CVE-2018-19133
Ecosystem: Packagist
Packages: flarum/framework
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses: CWE-200
Reviewed: 2023-07-24

Affected packages

• Packagist flarum/framework: <= 0.1.0-beta.7.1 (no fix yet)

Description

In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address.

Related

Alias · CVE (1)

CVE-2018-19133 In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address. vulnerability

Weakness · CWE (1)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References