HIGH🇵🇱 Wersja polska

CVE-2019-11514

CVSS 7.5v3.0pub. 2019-04-25upd. 2024-11-21

User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Flarum

    APP
    Flarum
    0.1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-41938CRITICAL9.0ten sam produkt

Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be convert...

CVE-2021-32671CRITICAL10.0ten sam produkt

Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to ...

CVE-2023-40033HIGH7.1ten sam produkt

Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to cond...

CVE-2023-22487HIGH7.7ten sam produkt

Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mention...

CVE-2019-13183HIGH8.8ten sam produkt

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.