Lucene search
Veracode Vulnerability DatabaseVERACODE:38514HistoryDec 16, 2022 - 5:16 a.m.
Privilege Escalation
2022-12-1605:16:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
privilege escalation
validation bypass
subscription bypass
software vulnerability
0.001 Low
EPSS
Percentile
50.5%
fixpunkt/fp-newsletter is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation in the captcha library, which allows an attacker to bypass security mechanisms and subscribe to many people.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fixpunkt/fp-newsletter | le | dev-typo39 | |
| fixpunkt/fp-newsletter | le | dev-typo39 |
Related
cve
cve
CVE-2022-47408
2022-12-14 21:15:14
prion
prion
Design/Logic Flaw
2022-12-14 21:15:00
cvelist
cvelist
CVE-2022-47408
2022-12-14 00:00:00
nvd
nvd
CVE-2022-47408
2022-12-14 21:15:14
osv
osv
Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)
2022-12-14 21:30:16
CVE-2022-47408
2022-12-14 21:15:14
github
github
friendsofphp
friendsofphp