Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-43847 EUVD-2021-30717

Authorization Bypass in Space Invite in HumHub

Published Dec 20, 2021 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to become unauthorized members of private Spaces. Versions 1.10.3 and 1.9.3 contain a patch for this issue.

Affected products

VendorProductAffectedFixed
humhub humhub >= 1.10.0, < 1.10.3, < 1.9.3 —

References