What is GHSA-4v4p-87m3-5423?

GHSA-4v4p-87m3-5423 is a security advisory published by GitHub Security Advisories with Medium severity. Known v1.3.1 contains Insecure Direct Object Reference

Which CVE IDs does GHSA-4v4p-87m3-5423 cover?

GHSA-4v4p-87m3-5423 covers the following CVE IDs: CVE-2022-30852. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4v4p-87m3-5423?

GHSA-4v4p-87m3-5423 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-4v4p-87m3-5423?

GHSA-4v4p-87m3-5423 affects 1 product, including: composer/idno/known:\u003c= 1.3.1.

GHSA-4v4p-87m3-5423MediumCVSS 4.3

Known v1.3.1 contains Insecure Direct Object Reference

Vendor

GitHub Security Advisories

Published

July 9, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-30852 →

📋 Description

Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).

The researcher report indicates that versions 1.3.1 and prior are vulnerable. Version 1.2.2 is the last version tagged on GitHub and in Packagist, and development related to the 1.3.x branch is currently on the dev branch of the idno/known repository.

🎯 Affected products1

composer/idno/known:<= 1.3.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-30852
https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
https://github.com/idno/known
https://withknown.com/
https://github.com/advisories/GHSA-4v4p-87m3-5423