Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0ycTc5LTU2cnEtOHYzY84AAxww

Codiad information disclosure vulnerability

A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. Upgrading to version 2.8.1 is able to address this issue. The name of the patch is 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Permalink: https://github.com/advisories/GHSA-2q79-56rq-8v3c
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ycTc5LTU2cnEtOHYzY84AAxww
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 1 year ago
Updated: 7 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Identifiers: GHSA-2q79-56rq-8v3c, CVE-2017-20178
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-20178
• https://github.com/Codiad/Codiad/pull/974
• https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5
• https://github.com/Codiad/Codiad/releases/tag/v.2.8.1
• https://vuldb.com/?ctiid.221498
• https://vuldb.com/?id.221498
• https://github.com/advisories/GHSA-2q79-56rq-8v3c

Repository: https://github.com/Codiad/Codiad
Blast Radius: 4.5

Affected Packages