GitHub Advisoryadvisory · Packagist

GHSA-xww4-w6ff-5q3g thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management

HIGH Published 2023-03-31 Modified 2023-04-07 Official page ↗
Aliases
CVE-2023-1762
Ecosystem
Packagist
Packages
thorsten/phpmyfaq
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269
Reviewed
2023-04-07

Affected packages

• Packagist thorsten/phpmyfaq: < 3.1.12 → fixed in 3.1.12

Description

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to privilege escalation from improper privilege management. Any user with the ability to add a new user can create a user with super admin rights. This has been fixed in 3.1.12.

Related

Alias · CVE (1)

  • CVE-2023-1762 Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12. vulnerability

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References