~ / search / GHSA-r6g8-mq9v-cgp4

GHSA-r6g8-mq9v-cgp4

Froxlor Incorrect Access Control

Source: GitHub Advisory Database (reviewed) High CVE-2018-12642

Packages

EcosystemPackageAffectedFixed in
Packagist froxlor/froxlor < 0.9.40 0.9.40

Details

As written in the advisory (Markdown source, shown as plain text).

Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user.

References

External links from the advisory. They lead to third-party sites.