CVE-2023-22488

🗓️ 12 Jan 2023 20:09:15Reported by [email protected]Type

Flarum forum software allows unauthorized access to private content via notification

Reporter	Title	Published	Views	Family All 6
Veracode	Information Disclosure	20 Jan 202305:36	–	veracode
CVE	CVE-2023-22488	12 Jan 202320:15	–	cve
Cvelist	CVE-2023-22488 Missing authorization in Flarum	12 Jan 202319:24	–	cvelist
Prion	Design/Logic Flaw	12 Jan 202320:15	–	prion
OSV	Flarum notifications can leak restricted content	10 Jan 202322:27	–	osv
Github Security Blog	Flarum notifications can leak restricted content	10 Jan 202322:27	–	github

Nvd

Node

flarum flarumRange<1.6.3

Source	Link
github	www.github.com/flarum/framework/security/advisories/GHSA-8gcg-vwmw-rxj4
github	www.github.com/flarum/framework/commit/d0a2b95dca57d3dae9a0d77b610b1cb1d0b1766a

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo