Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-3980 EUVD-2021-2535GHSA-hx6g-q9v2-xh7v

Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg

Published Dec 3, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: Elgg Product: elgg/elgg Package: elgg/elgg Ecosystem: Packagist

Description

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

Affected products

VendorProductAffectedFixed
elgg elgg/elgg unspecified – < 3.3.23 3.3.23

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist elgg/elgg < 3.3.23 3.3.23 GHSA-hx6g-q9v2-xh7v
Packagist elgg/elgg >= 4.0.0, < 4.0.5 4.0.5 GHSA-hx6g-q9v2-xh7v

References