Description
Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| idno | idno | < 1.6.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | idno/known | < 1.6.4 | 1.6.4 | GHSA-37j7-56xc-c468 |