Executive brief
Known v1.3.1 contains Insecure Direct Object Reference
Affected products
- Packagist idno/known
Junglewise Threat Intelligence
CVE-2022-30852: Known v1.3.1 contains Insecure Direct Object Reference
CVE-2022-30852 · Severity: low · CVSS 3.1 · Published 2022-07-09
Technologies: idno/known (Packagist). Vendors: Packagist.
Related threats
- Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
- Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
- Known affected by Account Takeover via Password Reset Token Leakage
- Known vulnerable to code execution via SVG file in v1.3.1
- Known v1.3.1 Cross-site Scripting