~ / search / GHSA-pww3-x2g7-x8q2

GHSA-pww3-x2g7-x8q2

Reportico affected by Incorrect Access Control

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-48865

Packages

EcosystemPackageAffectedFixed in
Packagist reportico-web/reportico <= 8.1.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.

References

External links from the advisory. They lead to third-party sites.