Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS00djRwLTg3bTMtNTQyM84AAtKh

Known v1.3.1 contains Insecure Direct Object Reference

Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).

The researcher report indicates that versions 1.3.1 and prior are vulnerable. Version 1.2.2 is the last version tagged on GitHub and in Packagist, and development related to the 1.3.x branch is currently on the dev branch of the idno/known repository.

Permalink: https://github.com/advisories/GHSA-4v4p-87m3-5423
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00djRwLTg3bTMtNTQyM84AAtKh
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: over 1 year ago

CVSS Score: 4.3
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Identifiers: GHSA-4v4p-87m3-5423, CVE-2022-30852
References:

• https://nvd.nist.gov/vuln/detail/CVE-2022-30852
• https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
• https://github.com/idno/known
• https://withknown.com/
• https://github.com/advisories/GHSA-4v4p-87m3-5423

Repository: https://github.com/idno/known
Blast Radius: 1.0

Affected Packages