Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[GHSA-3q4w-rf2j-fx5x] Observable Response Discrepancy vulnerability in HumHub... #4988

Open
wants to merge 1 commit into
base: kaerez/advisory-improvement-4988
Choose a base branch
from

Conversation

kaerez
Copy link

@kaerez kaerez commented Nov 6, 2024

Updates

  • Affected products
  • CVSS v4
  • Source code location
  • Summary

Comments

  1. Provide repo. details
  2. All current and past versions are vulnerable
  3. Add GHSA credit: Erez Kalman

@github-actions github-actions bot changed the base branch from main to kaerez/advisory-improvement-4988 November 6, 2024 09:53
@JonathanLEvans
Copy link

Hi @kaerez, I cannot find HumHub in any of the supported ecosystems. Could you provide a link to where HumHub can be found in one of the ecosystems?

Copy link

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

@github-actions github-actions bot added the Stale label Nov 22, 2024
Copy link

@Farnoosh85 Farnoosh85 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This article describes in detail how profile selection used to work

@github-actions github-actions bot removed the Stale label Nov 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants