CVE-2023-0311: phpMyFAQ Improper Authentication vulnerability
Published Jan 15, 2023
·Updated
Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
Other sources
phpMyFAQ Improper Authentication vulnerability
— Packagist
Affected Software
3 affected componentsFixes available
PhpMyFaq phpmyfaq<3.1.10
composer/thorsten/phpmyfaq<3.1.10
3.1.10
composer/thorsten/phpmyfaq<3.1.10
3.1.10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/thorsten/phpmyfaqto a version that resolves this vulnerability.Fixed in 3.1.10
Event History
Jan 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 16, 2023
Advisory Published
via GitHub·12:30 AM
Data Sourced
via GitHub·12:30 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via Packagist·12:30 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-0311.
2
What is the severity of CVE-2023-0311?
The severity of CVE-2023-0311 is critical with a score of 9.8.
3
What is the affected software for CVE-2023-0311?
The affected software for CVE-2023-0311 is Phpmyfaq prior to version 3.1.10.
4
How can I fix CVE-2023-0311?
To fix CVE-2023-0311, update your Phpmyfaq installation to version 3.1.10 or later.
5
What is the CWE number for CVE-2023-0311?
The CWE number for CVE-2023-0311 is 287.