CVE-2020-9468: Medium severity Piwigo piwigo vulnerability

Published Mar 26, 2020

Updated

The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the imageid parameter.

Affected Software

1 affected component

Piwigo piwigo=2.9.0-e-beta

Remediation

Patch Available

https://github.com/plegall/Piwigo-community/issues/49

Event History

Mar 26, 2020

CVE Published

via MITRE·07:12 PM

Data Sourced

via MITRE·07:12 PM

Description

Data Sourced

via NVD·08:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-9468?

CVE-2020-9468 is a vulnerability in the Community plugin 2.9.e-beta for Piwigo that allows users to set image information on images in albums for which they do not have permission.

How does CVE-2020-9468 impact Piwigo?

CVE-2020-9468 allows users to manipulate the image_id parameter and set image information on images in albums without permissions, potentially compromising the integrity of the albums.

What is the severity of CVE-2020-9468?

The severity of CVE-2020-9468 is rated as medium, with a score of 4.3 out of 10.

How can I fix CVE-2020-9468?

To fix CVE-2020-9468, update the Community plugin to a version that addresses the vulnerability.

Where can I find more information about CVE-2020-9468?

You can find more information about CVE-2020-9468 in the references section of the vulnerability description.