Leakage Of Private Discussion

fof/byobu is vulnerable to leakage of private discussion. Lack of enforcement of disablement to private discussion allows forum's users to start private discussions with themselves...

Design/Logic Flaw

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

CVE-2022-35921 User preference to prevent private discussions not respected in fof/byobu

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

CVE-2022-35921 User preference to prevent private discussions not respected in fof/byobu

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

CVE-2022-35921

fof/byobu is a private discussions extension for Flarum. The issue: private discussion disablement is not respected, risking leakage of private discussions. A patch exists in version 1.1.7, and users of Byobu with Flarum 1.0 or 1.1 should upgrade to Flarum 1.2 or later, or disable the extension i...

PT-2022-23027 · Flarum +2 · Flarum +2

Name of the Vulnerable Software and Affected Versions: fof/byobu versions prior to 1.1.7 Description: The issue concerns the fof/byobu private discussions extension for Flarum forum, where affected versions do not respect private discussion disablement by users. This means users who have chosen t...