CVE-2021-43847
20.12.2021, 22:15
HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to become unauthorized members of private Spaces. Versions 1.10.3 and 1.9.3 contain a patch for this issue.Enginsight
| Vendor | Product | Version |
|---|---|---|
| humhub | humhub | 𝑥 < 1.9.3 |
| humhub | humhub | 1.10.0 ≤ 𝑥 < 1.10.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-862 - Missing AuthorizationThe software does not perform an authorization check when an actor attempts to access a resource or perform an action.
References