CVE-2023-1762: thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
Other sources
thorsten/phpmyfaq prior to 3.1.12 is vulnerable to privilege escalation from improper privilege management. Any user with the ability to add a new user can create a user with super admin rights. This has been fixed in 3.1.12.
— GitHub
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/thorsten/phpmyfaqto a version that resolves this vulnerability.Fixed in 3.1.12 - Upgrade
Upgrade
thorsten/phpmyfaqto a version that resolves this vulnerability.Fixed in 3.1.12
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1762?
The severity of CVE-2023-1762 is high (8.8).
How does CVE-2023-1762 impact GitHub repository thorsten/phpmyfaq prior to version 3.1.12?
CVE-2023-1762 allows improper privilege management in GitHub repository thorsten/phpmyfaq versions prior to 3.1.12.
Is there a fix available for CVE-2023-1762?
Yes, the fix for CVE-2023-1762 is to update to version 3.1.12 of GitHub repository thorsten/phpmyfaq.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-1762?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-1762 is CWE-269.
Where can I find more information about CVE-2023-1762?
More information about CVE-2023-1762 can be found at the following references: [GitHub commit](https://github.com/thorsten/phpmyfaq/commit/ae6c1d8c3eab05d6e2227c7a9998707f4f891514) and [huntr.dev](https://huntr.dev/bounties/3c2374cc-7082-44b7-a6a6-ccff7a650a3a).