{"id":"GHSA-g8pg-33v4-9r96","aliases":[],"title":"Thelia authentication bypass vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"An authentication bypass was identifed in thelia/thelia project for customer and admin. This vulnerability is present from version 2.0.0-beta1 and is fixed in 2.1.3 and 2.2.0-alpha1.","severity":"high","score":7.5,"published":"2024-05-30T13:26:47.000Z","modified":"2026-07-17T18:30:27.884Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"thelia/thelia","sources":[{"name":"OSV · GHSA-g8pg-33v4-9r96","url":"https://osv.dev/vulnerability/GHSA-g8pg-33v4-9r96"}],"ranges":[{"events":[{"introduced":"2.0.0-beta1"},{"fixed":"2.1.3"}],"type":"ECOSYSTEM"}],"versions":["2.0.0","2.0.0-RC1","2.0.0-beta1","2.0.0-beta2","2.0.0-beta3","2.0.0-beta4","2.0.1","2.0.10","2.0.11","2.0.12","2.0.2","2.0.3","2.0.3-beta","2.0.3-beta2","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0","2.1.0-alpha1","2.1.0-alpha2","2.1.0-beta1","2.1.0-beta2","2.1.1","2.1.2"],"fixed":["2.1.3"]}],"sourceAffected":[],"references":["https://github.com/github/advisory-database/pull/8012","https://github.com/thelia/thelia/commit/028cfcf507cd8685772e156ec0c860034d407094","https://github.com/thelia/thelia/commit/71c1cee66d8f2e515e82478f792879fa63843644","https://github.com/FriendsOfPHP/security-advisories/blob/master/thelia/thelia/2015-04-13-1.yaml","https://github.com/thelia/thelia","https://web.archive.org/web/20160502224630/http://thelia.net/version-2-1-3-with-security-fix"],"sources":[{"name":"OSV","id":"GHSA-g8pg-33v4-9r96","modified":"2026-07-17T18:30:27.884445483Z","url":"https://osv.dev/vulnerability/GHSA-g8pg-33v4-9r96"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","score":7.5}],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T21:55:33.923Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}