GHSA-2q79-56rq-8v3c

Suggest an improvement
Source
https://github.com/advisories/GHSA-2q79-56rq-8v3c
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-2q79-56rq-8v3c/GHSA-2q79-56rq-8v3c.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-2q79-56rq-8v3c
Aliases
Published
2023-02-21T18:30:17Z
Modified
2023-11-01T04:48:07.082862Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Codiad information disclosure vulnerability
Details

A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. Upgrading to version 2.8.1 is able to address this issue. The name of the patch is 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Database specific
{
    "nvd_published_at": "2023-02-21T18:15:00Z",
    "github_reviewed_at": "2023-03-03T22:55:46Z",
    "severity": "HIGH",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-200"
    ]
}
References

Affected packages

Packagist / codiad/codiad

Package

Name
codiad/codiad
Purl
pkg:composer/codiad/codiad

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.8.1

Affected versions

v1.*

v1.3.6