CVE-2023-1886: thorsten/phpmyfaq vulnerable to authentication bypass
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
Other sources
thorsten/phpmyfaq prior to 3.1.12 is vulnerable to authentication bypass by capture-relay that allows unlimited comments to be sent. This has been fixed in 3.1.12.
— GitHub
thorsten/phpmyfaq vulnerable to authentication bypass
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/thorsten/phpmyfaqto a version that resolves this vulnerability.Fixed in 3.1.12 - Upgrade
Upgrade
thorsten/phpmyfaqto a version that resolves this vulnerability.Fixed in 3.1.12
Event History
Frequently Asked Questions
What is the vulnerability ID of this authentication bypass vulnerability?
The vulnerability ID is CVE-2023-1886.
What is the severity of CVE-2023-1886?
The severity of CVE-2023-1886 is critical with a CVSS score of 9.8.
What is the affected software for CVE-2023-1886?
The affected software for CVE-2023-1886 is Phpmyfaq prior to version 3.1.12.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by performing a capture-replay attack to bypass authentication.
How can I fix the authentication bypass vulnerability in Phpmyfaq?
To fix the authentication bypass vulnerability in Phpmyfaq, update to version 3.1.12 or later.