What is GHSA-4p4m-5qp7-479x?

GHSA-4p4m-5qp7-479x is a security advisory published by GitHub Security Advisories with Medium severity. phpMyFAQ has weak password requirements

Which CVE IDs does GHSA-4p4m-5qp7-479x cover?

GHSA-4p4m-5qp7-479x covers the following CVE IDs: CVE-2023-1753. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4p4m-5qp7-479x?

GHSA-4p4m-5qp7-479x has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-4p4m-5qp7-479x?

GHSA-4p4m-5qp7-479x affects 1 product, including: composer/thorsten/phpmyfaq:\u003c 3.1.12.

GHSA-4p4m-5qp7-479xMediumCVSS 5.5

phpMyFAQ has weak password requirements

Vendor

GitHub Security Advisories

Published

March 31, 2023

Last Modified

April 7, 2023

🔗 CVE IDs covered (1)

CVE-2023-1753 →

📋 Description

Weak password requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

🎯 Affected products1

composer/thorsten/phpmyfaq:< 3.1.12

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-1753
https://github.com/thorsten/phpmyfaq/commit/f612a72494080e04947da7028340fee4493fe8a5
https://huntr.dev/bounties/01d6ae23-3a8f-42a8-99f4-10246187d71b
https://github.com/advisories/GHSA-4p4m-5qp7-479x