CVE-2023-1887: thorsten/phpmyfaq vulnerable to business logic errors

April 5, 2023 (updated April 6, 2023)

Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

References

github.com/advisories/GHSA-gx43-fqrx-6fcw
github.com/thorsten/phpmyfaq/commit/400d9cd988d3287515c56b2ad6343026966f1a89
huntr.dev/bounties/e4a58835-96b5-412c-a17e-3ceed30231e1
nvd.nist.gov/vuln/detail/CVE-2023-1887

Code Behaviors & Features

Detect and mitigate CVE-2023-1887 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →