GHSA-qgc9-p7cj-jvh6medium6.5
FeehiCMS fails to enforce server-side immutability
The advisory, in context
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
feehi/feehicms Packagist
1 explicitly affected versions
2.1.1
View affected-version evidence
{
"ranges": [],
"versions": [
"2.1.1"
]
}